3 ms·
It seems like a 'simple' case of using SMS codes as a single factor. If it is enough for a password reset, it's a single factor. It seems to me that SMS codes
by rocqua 5y ago
It seems like a 'simple' case of using SMS codes as a single factor. If it is enough for a password reset, it's a single factor.
It seems to me that SMS codes are much more often abused like this than other second factors are.