Two Factor Insecurity: How Google, Amazon, Meta and thousands of other companies leave customers vulnerable over one-time codes to save time and money
Album @ Album @lemmy.ca Posts 0Comments 423Joined 2 yr. ago

Album @ Album @lemmy.ca
Posts
0
Comments
423
Joined
2 yr. ago
Deleted
Permanently Deleted
Removed
What the actual hell, Microsoft?
Deleted
Permanently Deleted
Deleted
Permanently Deleted
Deleted
Permanently Deleted
It's as simple as not getting OTPs via SMS or email.
Use a 2fa app where you manage the pre shared key and provide it once and then there's is no transmission of keys from the provider. A hard key is effectively the same.