3 ms·
> 2FA is bullshit and doesn’t work in practice. You made an argument against SMS/phone-based 2FA, but didn’t address any other 2FA method such as U2F. I don’t
by vinay427 5y ago
> 2FA is bullshit and doesn’t work in practice.
You made an argument against SMS/phone-based 2FA, but didn’t address any other 2FA method such as U2F. I don’t see how your claim follows.
- supperburg 5y agoI only say 2FA because every instance of being offered the choice to use 2FA in my experience was phone based. It’s by far the most common 2FA scheme — its very widely asserted that phone based 2FA is secure and it enrages me because it really isn’t. But something like u2f as far as I can tell isn’t any better than memorizing a strong pass-phrase. It’s basically just moving the password manager to a computer that’s not connected to the internet. I guess it’s easier than memorizing.