Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

SMS is the 2nd factor. Actually it's worse than just a 2nd factor because a compromised phone number can usually be used for password recovery


You are confusing two different things.

The problem is one factor account recovery, because it means you have one factor auth.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: