2 ms·

so they used sms based 2fa. I had 2fa based on google authenticator (not sms), because of that attack vector. I only had a few thou dollars. But they decided go

by rnk 4y ago

so they used sms based 2fa. I had 2fa based on google authenticator (not sms), because of that attack vector. I only had a few thou dollars. But they decided google auth is not accepted anymore and I failed to login and reset it and so the result was locking my account for a year - until recently when I spent multiple days getting it reset. Thus my skepticism. No one should allow/use text message based 2fa of course.

suzzer99 4y ago
Correct, text-based 2FA is insecure. But coinbase allows it, and most banks offer it as the only option. The link I posted basically describes exactly what happened to my buddy and how they pulled it off. T-Mobile + text-2FA + coinbase is a chain of weak links.