ST Alpha - "I could see the authorization code thing, but at least that's time sensitive. Is the recommendation to get those by email instead? -- nm" (Reading a Post)

SlickerTalk
Search Archives
The Leaderboard
The FAQ

Login
Create Account

Search Dr. S. Talk
TT/ST Wiki
How Well Do You Know ...

RSS Feed

Hosting by DigitalOcean

Support ST on Ko-Fi

Down to Post

Backboards:

Posts: 154

In response to "I believe the former is the concern. Many services still text authorization codes and people certainly will send sensitive information to others" by oblique

I could see the authorization code thing, but at least that's time sensitive. Is the recommendation to get those by email instead? -- nm

Posted by Dano (aka dano) Dec 4 '24, 07:13

(No message)

Responses:

probably better than text. MFA apps are preferred and Passkeys or other FIDO2 compliant options (hardware keys) being the best -- nm - oblique Dec 4, 07:14 4
- But it feels like most places that do the auth code thing don't even offer those options. It's just 'text or e-mail a code' -- nm - ty97 Dec 4, 07:22 3
  - MFA apps are pretty common now (google authenticator is the one I use). Passkeys are really new -- nm - decline Dec 4, 07:29 2
    - And then my information is going to be exposed multiple times anyway due to a vulnerability in an application that every company uses like MoveIt. -- nm - Dano Dec 4, 07:31 1
      - the authenticator app only has a user id (or email). -- nm - decline Dec 4, 07:42

Post a message top

Replies are disabled on threads older than 7 days.