4 ms·
Twitter just made me disable my SMS 2FA setting, reserving the feature for twitter blue users. It's a weird decision on their part, they still allow me to use a
by m348e912 4y ago
Twitter just made me disable my SMS 2FA setting, reserving the feature for twitter blue users.
It's a weird decision on their part, they still allow me to use an MFA application or a hw key, just not SMS.
SMS 2fa is understood to be the least secure form of MFA so I am surprised Twitter only reserves it for their twitter blue users.
- doodlesdev 4y agoI guess it actually makes a lot of sense, this is because sending SMS costs money, sometimes quite a lot when you are doing it at scale, if the user is paying you at least recoup those expenses.
- pengaru 4y agoDoes this mean twitter no longer immediately disables new accounts when they fail to add a phone number for receiving 2FA?
- m348e912 4y agoProbably. I don't have 2fa enabled right now. Although I will probably switch to google auth very soon.
- ZoF 4y agoThe rationale is that 2FA was being abused by some telcos with sockpuppets at a net cost of (ostensibly) some 50+Million a year for twitter. If that's true, and because it's the least secure MFA option, I don't see it being that difficult or controversial of a decision. I also do enjoy that this is listed as an 800% increase, not really how 0->$8 works.