Hacker News Reader

These platforms should not offer 2fa with SMS. And force their customers to use 2FA via MFA instead.

Don't assume they don't. Most platforms not only enable multiple forms of security, you even get rewards if you choose better security. I use an exchange the uses double security, meaning you have 20 seconds to verify via email and 2FA, and on top of that the logins, withdrawals and transfers all have sperate passwords..and your able to rate limit them based on time periods.

Most of the knew jerk reactions in here really don't see to know very much about how this actually works and how it's actually the users responsibility at the end of the day.

> you even get rewards if you choose better security

Service providers should know better than their users and make the best choices for them.

It is not like when you buy a car you get to choose whether you want airbags or not. They decided for you, and you must have airbags, period.

Users, on overage, do not posses the knowledge to make the best decision when it comes to security.

They go with the least friction solution. SMS works great everybody know how they work.

So, yeah, the burden and responsibility should not be on the end user. This is clearly companies' fault.

Reply on news.ycombinator.com