Hacker News new | ask | show | jobs
by mtremsal 916 days ago
SMS 2FA is better than no MFA at all, despite the very valid concerns about SMS. It at least protects against credential stuffing and similar automated attacks.
1 comments

I guess I've always cynically assumed that companies want my phone number to make the data they gather more valuable by making it easier to link with a unique index like a phone number.
Two things can be true at the same time.