Hacker News new | ask | show | jobs
by ossguy 2879 days ago
Agreed that such services should stop using phone numbers. In the meantime, you can get inexpensive numbers from https://jmp.chat/ - useful for 2FA as well.
2 comments

That's technically not two factor if you only need to know a password to get access to the one-time code.

It's two passwords, both are something you have to know, there's nothing you need to have or be (sms and biometrics respectively)

Your comment highlights why phone-based 2FA is not a 2FA.
It is, you need to have the phone.

But if you can access the phone content remotely behind a password, then it stops being 2FA.

Yeah I use Google Voice for this purpose, which isn't _really_ 2fa anyway (because it's my google account).
Some services somehow know that the phone number is VoIP (Google Voice) and disallow you from using it with TFA. IIRC, Steam is one example.