2 ms·
> Enroll second factors. Having more accessible 2FA methods is important to ensure that you always have access to your account. You can now have both an authent
by capableweb 4y ago
> Enroll second factors. Having more accessible 2FA methods is important to ensure that you always have access to your account. You can now have both an authenticator app (TOTP) and an SMS number registered on your account at the same time. While we recommend using security keys and your TOTP app over SMS, allowing both at the same time helps reduce account lock out by providing another accessible, understandable 2FA option that developers can enable.
Nope, useless initiative if they allow people to use SMS codes. Sim-hijacking is so easy that I'd wager not having any 2FA is more secure than offering SMS 2FA, as people will also be able to social engineer Microsoft to give access to a GitHub account if they are the "telephone number owner", as long as they can prove they can solve the SMS 2FA.
Sad to see, but not surprising.
- huhneverthot 4y agoAllowing account access with 2fa code alone is not 2fa, so I guess this feels like a made-up concern.