Hacker News new | ask | show | jobs
by ztcfegzgf 1344 days ago
"you don’t have to worry about phishing" .... TOTP is also vulnerable to phishing, same as SMS.
1 comments

What it isn't vulnerable to is SIM jacking, IMO that makes it far more valuable
SIM swap is real but it cannot be automated, so at scale it is very rare. As a threat it is way overemphasized in the tech forum community.