Comment

Comment by jimberlage

So the case against SMS 2FA boils down to

“There are two factors, but the second factor is something a determined actor can get around by SIM swapping.”

But there are still two factors and SMS 2FA handles disaster recovery much better than the listed alternatives for most people.

This argument strikes me as kind of like - “a determined actor can get around a deadbolt pretty easily, so the standard for homes should be a vault door and fines if you leave a hide-a-key rock anywhere near your house.”

parent jimberlage 2 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton