Tell HN: SMS-based two-factor authentication is not secure
As someone advocating against this for a while, who has a internet only sim these days and no phone number it is scary how many companies depend on SMS for security.<p>Even if it's only second factor today, what really prevents the company from allowing password resets one day? Nothing, I likely would not even notice it until it is to late.<p>I can own an email address, but I can never own a phone number. Nearly all contracts clearly state that the number is not actually yours in different wordings and nothing prevents anyone from reclaiming the number and give it to someone else.<p>It's stupid. And annoying.