2FA SMS is not obsolete because neither is a combination lock (opens in new tab)

(blog.ringcaptcha.com)

2 pointsnethsix8y ago3 comments

3 comments

3 comments · 2 top-level

jodrellblank8y ago· 1 in thread

SMS are more likely to be read by the user compared to app notifications

is nothing safe from effing marketers? Not even authentication frontends in a security discussion are free from abusing it as a sticky communication channel.

It won't be more likely to be read than app notifications when it's as abused as app notifications, and we'll all be worse off for it.

nethsixOP8y ago

Yeah. Every single action is tracked these days, and almost every channel is utilized as a marketing attempting; some channels are just very well disguised or they do provide some value/amusement that they are sort of welcome or at least tolerable.

borplk8y ago

> SMS-based 2FA also offers a unique proposition – it enables the web service to verify the user, as well as acquire a sticky and unique user identity (phone number) in a single swoop. This gives the web service a reliable channel to get the user’s attention.

No, just no.

j / k navigate · click thread line to collapse