Hacker News new | ask | show | jobs
by account42 181 days ago
Exactly, just like all those site that added SMS 2FA didn't do it for the extra security.
1 comments

More than one thing can be true at once.

In the case of Twitter, there is evidence that the initial implementation was meant to just be a security mechanism but later someone else noticed they had a handy database of user phone numbers and decided to treat them as free marketing contact information.