3 ms·

Companies that mandate use of another company offer a good reason to shun both companies, when there are independent competitors which prioritize customer relat

Companies that mandate use of another company offer a good reason to shun both companies, when there are independent competitors which prioritize customer relationships over "business partner" relationships. SMS is woefully insecure for multi-factor authentication, when we have TOTP and other open standards that work with local-only password managers.

xp84 3y ago
And not only that, most companies that involve SMS in their IDP make it a master key (a single-factor) -- if you can read one text, you can take over the whole account without even having the password. I keep waiting for this to change, but out of all my banks not one supports a proper TOTP.