2 ms·
What are you talking about? Second factor on the phone IS how many companies do 2FA. (Not just ones with poor security, but big tech companies.) And not for no
by t8sr 3y ago
What are you talking about? Second factor on the phone IS how many companies do 2FA. (Not just ones with poor security, but big tech companies.)
And not for nothing, but a yubikey isn’t exactly protected from border agents either. At least a phone has some legal protections now.
- tinus_hn 3y agoIt’s not really two factor authentication if the claim is the phone also contains the passwords, the first factor.
- kelnos 3y agoOP stated that getting access to the phone would have allowed a hacker to compromise the protected systems. A 2FA credential alone shouldn't allow that, so my assumption was that they were storing a full authenticator on the phone.
- throwaway290 3y agosteal password + seize the phone to get 2 factor token = compromise.