How exactly is the one time code you are sending me via SMS a security control if you ask me to give you the number to send it to and don’t do any verification that the number belongs to me?

May 23, 2022 · 10:34 PM UTC

3
11
Replying to @hal_pomeranz
Infinite Trust Model
1
Replying to @hal_pomeranz
It verifies you know someone that has a phone and can give you six digits. What could go wrong? </s>
Replying to @hal_pomeranz
Oh look, the tech glitteratti waking up to the fact that 2FA based on weak auth is still bad....