A lot of sites have this security flaw, turning SMS 2FA into 1FA: all you need i...

sgerenser 8 months ago | parent | context | favorite | on: T-Mobile employees across the country receive cash...

A lot of sites have this security flaw, turning SMS 2FA into 1FA: all you need is the phone number. Although allowing it even if you use non-sms 2FA is even worse, 100% defeating the purposes of using an alternate form of 2FA.

tekknik 8 months ago [–]

Not even just SMS, some sites are doing the same with email.