Conversation

Notices

1. LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864} (lnxw48a1@nu.federati.net)'s status on Sunday, 24-May-2020 22:03:03 UTC LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864}
   I was just thinking about those sites where they send a confirmation code by SMS and you cannot log in without it. Yesterday, Mark sent me a couple of messages by SMS that took around 12 hours to travel 100 miles. Maybe SMS isn't really appropriate for a "second factor".
   • mangeurdenuage (mangeurdenuage@loadaverage.org)'s status on Sunday, 24-May-2020 22:17:38 UTC mangeurdenuage

     in reply to
     >Maybe SMS isn't really appropriate for a "second factor".
     It's not and more than that it's insecure and reduce privacy.
     As far as I know second factor auth was put in place because of reckless users who puts the same password everywhere and thus their account got usurped. The only viable solution to this is people who will use a password manager. As for the method of "second factor" a second password or email validation is good enough.
     LinuxWalt (@lnxw48a1) {3EB165E0-5BB1-45D2-9E7D-93B31821F864} repeated this.