4 ms·
Lmao. That's some bikeshedding. Let me name other SMS 2FA "travesties" (regardless of TOTP support): Paypal, Box, Amazon, Citizen, Google, Zoom, Samsung, Signa
by cvccvroomvroom 4y ago
Lmao. That's some bikeshedding. Let me name other SMS 2FA "travesties" (regardless of TOTP support): Paypal, Box, Amazon, Citizen, Google, Zoom, Samsung, Signal, Lyft, (my bank), Coinbase, Discord, Ring, Twitter, ...
- NavinF 4y agoHe said “(ONLY!) use SMS-based 2FA”. Some of those sites support webauthn. TOTP is secure enough for the rest. SMS 2FA is only a problem when it’s the only option.
- throwaway290 4y agoWhy does offering an insecure authentication method stop being a problem when there are alternatives? It should not be offered.