3 ms·
Progress, not perfection. Sms should never be used or offered, and needs congressional action to be stopped as a practice. TOTP at least prevents turning Wire
by exabrial 4y ago
Progress, not perfection.
Sms should never be used or offered, and needs congressional action to be stopped as a practice.
TOTP at least prevents turning Wireless carriers into security providers and is "good enough" for nearly everything.
And yes, WebAuthn/U2F is top of totem pole and should be something we're striving for nearly everything.
- computerfriend 4y ago> Sms should never be used or offered It's better than nothing.
- throwawaaarrgh 4y agoyou could say the same about any shitty security, but most people don't want shitty security
- computerfriend 4y agoFrom this thread and elsewhere, I'd argue that's not the case.
- exabrial 4y agoNo, it's WORSE than nothing. You're turning a 3rd party [wireless provider] into a security service that can authenticate you without your knowledge.
- exabrial 4y agoYour comment is aging well: https://arstechnica.com/information-technology/2023/05/t-mobile-discloses-2nd-data-breach-of-2023-this-one-leaking-account-pins-and-more/ https://arstechnica.com/information-technology/2023/05/t-mob...