4 ms·
Or maybe anyone that claims to be a security person worth their salt (on the companies doing 2fa) need to sunset SMS 2fa and use OTP instead, at least
by raverbashing 5y ago
Or maybe anyone that claims to be a security person worth their salt (on the companies doing 2fa) need to sunset SMS 2fa and use OTP instead, at least
- jrootabega 5y agoTrue, and coinbase appears to do that (I say "appears to" because I don't know what they would do if I actually tried to reset my password and cajoled them into using my phone number to do it.) Unfortunately, some orgs, and even more unfortunately, some banks, still require/force SMS mfa.
- UncleMeat 5y agoOTP is only marginally safer than SMS. Phishing is a far more common threat than SIM-swapping.