6 ms·
Nobody ever pretended SMS is secure, but it's also the only thing that actually arrives on a phone in many rural areas of the world.
by pmlnr 6y ago
Nobody ever pretended SMS is secure, but it's also the only thing that actually arrives on a phone in many rural areas of the world.
- loloquwowndueo 6y agoThen you probably don’t have a suitable internet connection and 2FA is not a concern to you, right? Also, did you know (tm) that other 2FA mechanisms such as OATH or Fido/fido2 don’t involve stuff arriving anywhere, other than the actual 2fa code? You generate it locally and then type it when promoted by the remote application. If you need 2FA, you have a computer with a suitable internet connection. If you can’t use non-SMS 2FA it’s likely you also actually have no use for it.
- deleted 6y ago[deleted]
- hansel_der 6y agothis! sms is also on the same security level with email, fax or a signed letter but way more convenient
- dathinab 6y agoit's actually less secure then email. Or even a signed letter depending on what security you are looking for.. And some 2FA are actually less demanding wrt. information delivery then SMS.
- lxgr 6y agoSpeak for yourself. I find it incredibly inconvenient compared to email.
- pmlnr 6y ago> sms is also on the same security level with email No, it's really not. Email can be cryptographically signed, SMS can not.
- jjav 6y agoSMS is far less secure than a code via email. Also often less accessible, in the circumstances where those SMS challenges show up most often (traveling, for instance).
- 33Backpack33 6y agoIf we all agree it's not secure then why do we keep using it? I rather have a unique password then rely on SMS anything especially if that account allows you to reset your password by SMS.
- jjav 6y agoIf you need a challenge code it's because you're connecting to something, so it's a given that internet connectivity is present. Which means you could also receive an email, far more secure than SMS. Or the site could just use TOTP.
- deleted 6y ago[deleted]