3 ms·

the Two Factor auth to validate is really you after guessing/knowing your pass from a previous leak

• entropyneur 4y ago
  It's worse. 2FA is optional and SMS code is the first (and default) auth method.
  • super256 4y ago
    > It's worse. 2FA is optional and SMS code is the first (and default) auth method. This will be changed on Saturday. Got the following message about API changes last week: https://telegra.ph/Telegram-API-Changes-02-16 https://telegra.ph/Telegram-API-Changes-02-16
    • entropyneur 4y ago
      That announcement seems to be concerned with unofficial clients only. But it does sound like the change is a part of some bigger package.
    • anonymoose33282 4y ago
      But given the choice, isn't SMS a stronger first authentication factor? It's temporary and randomized, whereas users don't change passwords that frequently. So a password is much more susceptible to keyloggers/malware/brute-force than an SMS code.