4 ms·
Also this part is very weak: > When a service enables SMS-2FA, an attacker can simply move to a different service. This means that a new attack isn’t necessary
by kabes 6y ago
Also this part is very weak:
> When a service enables SMS-2FA, an attacker can simply move to a different service. This means that a new attack isn’t necessary, just a new service.
If you implement 2FA you do it to protect the user account on your service, not all services.
- FabHK 6y agoYes, that was a weak argument. How is that not analogous to: "Password hashing and salting is useless. When a service enables password hashing and salting, an attacker can simply move to a different service that stores passwords in plain text. This means that a new attack isn’t necessary, just a new service."