431
What industry secret are you aware of that most people aren't?
(programming.dev)
A loosely moderated place to ask open-ended questions
If your post meets the following criteria, it's welcome here!
Looking for support?
Looking for a community?
~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
Now tell banks to stop requiring SMS 2FA holy shit
You actually want them to do this, it’s terrifying easy to set up a cell tower or call centre and convince banks and people you are customers or banks.
I think he was meaning because of how easy it is to spoof and intercept sms. Use some thing like OTP that’s a common standard instead.
You probably mean TOTP. OTP is a generic term for any one-time-password which includes SMS-based 2FA. The other main standard is HOTP which will use a counter or challenge instead of the time as the input but this is rarely used.