Twitter doesn’t use 2FA over SMS. Dorsey’s hack doesn’t tell us anything about t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

mikeash on Sept 11, 2019 | parent | context | favorite | on: Hackers Hit Twitter CEO Jack Dorsey in a ‘SIM Swap...

Twitter doesn’t use 2FA over SMS. Dorsey’s hack doesn’t tell us anything about that.

mceachen on Sept 11, 2019 [–]

Yes, they do. 2FA is via SMS or TOTP.

Frustratingly, you can't enable TOTP without a phone number, and if you remove your phone number, you disable 2FA.

mikeash on Sept 11, 2019 | [–]

No, they don’t. You can access your account with just SMS. That makes it 1FA.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact