2 ms·
Sure, SMS 2FA isn't great. It may even be bad. But calling for government legislation to make that decision for other people is definitely bad. This is somethin
by superkuh 3y ago
Sure, SMS 2FA isn't great. It may even be bad. But calling for government legislation to make that decision for other people is definitely bad. This is something you ban internally at your company or chose not to use yourself. Calling for government use of force against people who use SMS 2FA is really nasty. That said, maybe I'm missing come implicit context here and he's only taking about banning it for incorporated persons like the Digital Markets Act. That would be okay. But if it applies to human persons that's really bad.
And even if I assume all the premises are true and roll with it, shouldn't password based logins be "banned" first? And we all know that's infeasible.
- LorenDB 3y agoI'm talking about banning implementation of SMS 2FA server side. Individual users wouldn't be banned from using it, but it would be illegal to provide it as a company (or at least for important sectors like banks).
- superkuh 3y agoI am not talking about individual users using corporate services. Individual human people run services on the internet too. Non-incorporated businesses owned by humans should not be subject to this kind of thing. Nor should non-incorporated persons running services that are not businesses. Only businesses that trade away their human rights for limited liability by incorporating should be covered by such legislation, if anyone.