3 ms·
It's not clear to me if Twitter offers other types of 2FA like TOTP. I don't use it. What do you think the solution is here though? If someone is using a compa
by pcthrowaway 4y ago
It's not clear to me if Twitter offers other types of 2FA like TOTP. I don't use it.
What do you think the solution is here though? If someone is using a company that's scamming twitter, it's not their responsibility to continue being scammed so they can support SMS 2FA for that user.
- ceejayoz 4y agoThey do, thankfully, support TOTP and U2F keys (and multiple of them).
- sumeno 4y agoA reasonable solution would be to disable the ability to add SMS 2FA to accounts and require either disabling 2FA or selecting a different 2FA method upon next login. If specific accounts with SMS 2FA manage to abuse it after that then ban those accounts, since you can't add SMS 2FA to a new account that removes their avenue for abuse.