Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yeah, I'd draw a hard line between "SMS 2FA is better than no 2FA" and "SMS should never become a single-factor recovery method."

I agree SMS should never be an option for single-factor recovery.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: