3 ms·
All the arguments in the post against SMS 2FA are also arguments against TOTP
by frei 6y ago
All the arguments in the post against SMS 2FA are also arguments against TOTP
- jandrese 6y agoThere is no help desk that can give away your TOTP secret. That’s the big weakness with SMS, someone buys a phone and asks the clerk to give them your phone number.
- UncleMeat 6y agoIt is a publicized weakness. In practice, phishing is scalable and social engineering isn’t. And humans are shit at detecting phishing attacks.