2FA is so overrated. You can so easily do a sim swap to get access to a particul... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ev0lv on Sept 6, 2019 \| parent \| context \| favorite \| on: US city rejects $5.3M ransom demand and restores e... 2FA is so overrated. You can so easily do a sim swap to get access to a particular phone number and bypass 2FA.

therealrootuser on Sept 6, 2019 | [–]

The problem isn't with 2FA, the problem is with SMS-based 2FA.

bonestamp2 on Sept 6, 2019 | | [–]

True, and that's why you shouldn't use SMS 2FA. The unfortunate part is when that's the only method offered.

parliament32 on Sept 6, 2019 | [–]

TOTP and HOTP 2FA are unbreakable and supported by literally everyone. Who still does SMS 2FA anymore?

out_of_protocol on Sept 6, 2019 | [–]

Lots, unfortunately. With no way to opt out

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact