That isn't a meaningful distinction. Both cases involve you typing in a number i... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		UncleMeat on June 9, 2021 \| parent \| context \| favorite \| on: Tell HN: SMS-based two-factor authentication is no... That isn't a meaningful distinction. Both cases involve you typing in a number into a web form.

staticassertion on June 10, 2021 [–]

It was a meaningful distinction to the OP...

While TOTP contains a bypass (phishing) SMS contains an additional vulnerability.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact