Comment on You don’t need SMS-2FAparentComments−frei6yAll the arguments in the post against SMS 2FA are also arguments against TOTP−jandrese6yThere is no help desk that can give away your TOTP secret. That’s the big weakness with SMS, someone buys a phone and asks the clerk to give them your phone number.−UncleMeat6yIt is a publicized weakness. In practice, phishing is scalable and social engineering isn’t. And humans are shit at detecting phishing attacks.
Comments
All the arguments in the post against SMS 2FA are also arguments against TOTP
There is no help desk that can give away your TOTP secret. That’s the big weakness with SMS, someone buys a phone and asks the clerk to give them your phone number.
It is a publicized weakness. In practice, phishing is scalable and social engineering isn’t. And humans are shit at detecting phishing attacks.