3 ms·
> much better than nothing If you wouldn't advocate banning deadbolt locks just because vault doors are better, why advocate banning SMS 2FA?
by panarky 3y ago
> much better than nothing
If you wouldn't advocate banning deadbolt locks just because vault doors are better, why advocate banning SMS 2FA?
- nullc 3y agoOne reason to ban 2FA SMS is because end users take on most of the cost of a compromise, but they are generally pretty poweless to prevent others from creating the vulnerability, particularly where the party requiring the SMS 2fa is a government or government contractor. I don't know that I'd go so far as saying that a ban is the right thing, but something is needed.