4 ms·
1) The ability to reset account credentials or get into a service just by using a phone number is not real 2FA and is a huge security risk generally. SMS based
by walrus01 5y ago
1) The ability to reset account credentials or get into a service just by using a phone number is not real 2FA and is a huge security risk generally. SMS based 2FA is not real 2FA.
2) Social engineering mobile phone first-tier customer service reps into doing a SIM swap is not hard at all.