I've made the argument before and continue to stand by it. SMS as an MFA factor will always be a weak second factor. It's not really "something you have". It's just a time limited second password. This is fine for low security applications. But, if you need higher security, go to smartcard, yubukey or something that must be physically present.
this post was submitted on 18 Sep 2023
5 points (100.0% liked)
netsec
1240 readers
1 users here now
Technical news and discussion of information security.
Rules:
- Be excellent to each other
- Keep it on topic
- Absolutely no PII or doxing
- No disclosure posts
founded 2 years ago
MODERATORS