Discover and read the best of Twitter Threads about #Token2
Most recents (1)
A while back, @elonmusk posted about changes to 2FA.
What is 2FA, why is it important and what do you have to do?
2FA stands for 2nd Factor Authentication. The 1st "factor" is what you know (e.g. password). The 2nd factor is "what you have" (usually).
What is 2FA, why is it important and what do you have to do?
2FA stands for 2nd Factor Authentication. The 1st "factor" is what you know (e.g. password). The 2nd factor is "what you have" (usually).
What you have is usually some piece of hardware (e.g. a phone or a #Yubikey/#Token2).
However, it's really hard to determine that you actually have that hardware. So what you usually get is a PROXY to that hardware.
In the case of a phone, it could be the phone number.
However, it's really hard to determine that you actually have that hardware. So what you usually get is a PROXY to that hardware.
In the case of a phone, it could be the phone number.
So, what is used in normal 2FA is "SMS 2FA", which means it sends u a code to ur phone number.
So this is a proxy of a proxy of a proxy. The code that is sent is a "stand-in" for u owning the no. & actually having the device.
But SMS 2FA is insecure securityboulevard.com/2021/12/why-us…
So this is a proxy of a proxy of a proxy. The code that is sent is a "stand-in" for u owning the no. & actually having the device.
But SMS 2FA is insecure securityboulevard.com/2021/12/why-us…
