2 ms·

Don't 2FA codes have short expiry times?

• hughesjj 3y ago
  Doesn't matter if you have live access. It's on demand. This is why real 2fa is 'something you have' not 'something else you know) The assumption here is that sms 2fa requires something you have, but that's always been really horny for telephone numbers, since the phone company is the one that actually 'has' numbers
  • JamesSwift 3y ago
    In this case it turned out that “something you have” was “access to prod”