If it is enough with access to the phone number, no password needed, then it is ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

zulln on Jan 11, 2020 | parent | context | favorite | on: HTML attributes to improve your users' two factor ...

If it is enough with access to the phone number, no password needed, then it is no longer 2FA.

Thorrez on Jan 12, 2020 [–]

Sure, but 17 websites do this. For those websites you introduce significant weaknesses if you enable SMS 2FA.

https://www.issms2fasecure.com/

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact