4 ms·
LOL the place I work now has some passwords in the password manager that say "call the eng director for the 2fa" because the service only uses SMS 2FA. Like go
by leetrout 3y ago
LOL the place I work now has some passwords in the password manager that say "call the eng director for the 2fa" because the service only uses SMS 2FA.
Like google voice or similar doesnt exist.
- rft 3y agoWhile this seems weird, it actually somewhat qualifies as an insecure 4 eyes. Ofc the eng director can act without another party, but for anybody else this usually involves at least a short "sure, what are you trying to do?". Google voice and other "non-traditional"/VoIP services are sometimes blocked by websites sadly. P.S. dishonorable mention: Apple Business Manager uses SMS 2FA only, at least you can have multiple admin accounts