27 ms·

SMS 2FA is still superior to nothing. Most account compromises aren't because of SIM swapping. Phishing, password spraying, and (especially) password reuse are

SMS 2FA is still superior to nothing. Most account compromises aren't because of SIM swapping. Phishing, password spraying, and (especially) password reuse are the most common and SMS 2FA completely defeats the latter two and makes the first one harder. Most people/groups who phish are pretty technically inept so they struggle to automate things like OTP capture/use, so they're stuck doing it live, and that obviously doesn't scale well.

war1025 6y ago
> SMS 2FA is still superior to nothing. It's better than nothing, but given that it's trivial to go from that to just an authenticator app, I would personally not have any of my accounts set up to accept sms 2FA. Of course, the best thing would be for people to use actual passwords instead of "Watermelon23", but that's easier said than done.