2FA with *only* SMS is a contradiction. A single verification is by definition *... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

ineedasername on July 1, 2021 | parent | context | favorite | on: Carrier injecting ads into SMS '2FA' texts

2FA with only SMS is a contradiction. A single verification is by definition not actually 2FA.

If both are actually being used then an attack has to compromise the password and the SMS, which is going to be harder than just the password.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact