Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The user makes that assumption. Google offers and promotes Authenticator for users who want a secure connection.


I submit that a negligible proportion of users is aware that voicemail may be used as a factor, so they're not actively making that assumption. I would say it's Google's responsibility to protect users from the many insecure voicemail systems of telcos, since extra security is the whole point of enabling 2FA.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: