4 ms·
Every second SMS authorization does not reach my phone. Just yesterday I couldn't log in to my GitHub from new computer, because my phone did not receive authen
by vbezhenar 1y ago
Every second SMS authorization does not reach my phone. Just yesterday I couldn't log in to my GitHub from new computer, because my phone did not receive authentication code. I didn't have any bans because of that. I think that a lot of people experience similar problems, so it makes no sense to look for fraudsters, 99.9999% will be false negatives.
- hocuspocus 1y agoThere's really no reason to use SMS 2FA for GitHub though, you can literally pick anything else.
- vbezhenar 1y agoAnything else could be lost. I can always get new SIM card for this number. I don't need to backup it and I can't accidentally delete it. That's the biggest reason for me to link phone number everywhere. I'd hate to lose access to my GitHub account.
- hocuspocus 1y agoI don't see how I could simultaneously lose my three hardware keys (laptop, phone and Yubikey) and backup codes.
- tlb 1y agoIt's also not very hard for scammers to get a SIM card for your number, unless you're using a carrier that specializes in not allowing SIM swapping attacks.
- hocuspocus 1y agoI dislike SMS 2FA and services that use my phone number as a stable identifier, however SIM swapping is not really a thing in most countries.
- vbezhenar 1y agoThat's why 2FA is called 2FA. It should require two factors. SMS + Password, for example. So scammers would need to steal both password and perform SIM swap, which hopefully is a bit harder.