This should be far more secure and privacy friendly than a Sim card of a cellular connection. Why isn’t this done more often? What are the Pros and Cons. I bet the price is similar as well.

  • JustEnoughDucks
    4•16 hours ago

    90% of American commercial services that is.

    Online services or many/most European services have more proper 2FA (TOTP, app-based, card reader OTP, etc…)

    • @delirious_owl
      1•7 hours ago

      Can you name me an EU bank that doesn’t a phone number to signup?

      Unfortunately, PSD2 doesn’t support TOTP and other strong 2FA solutions, so they all appear to require phone numbers. This is one area where EU is worse than US

      • JustEnoughDucks
        1•7 hours ago

        That is a completely separate issue from the above commenter.

        You absolutely cannot get 2FA authenticator codes from 90% of services

        A shockingly large amount of companies demand phone numbers and send verification texts before allowing you to do business with them, to create an account, to recover an account, to delete an account, to place an order, etc.

        They really shouldn’t, it’s a bad security practice but companies love it because with a phone number they can lower support costs by just allowing people to do a self-service where they get an automated text and can unlock their locked account.

        Also an issue, but indeed a separate issue from using unsecure SMS as TOTP.

        • @delirious_owl
          1•5 hours ago

          I don’t follow. Banks are required to use insecure SMS for OTPs by PSD2