Assurance

[Tom Scavo <>]

You may have heard this news about attacks on SMS-based 2FA at banks
around the world:

https://twitter.com/trscavo/status/492079055647559681

It's becoming clear that 2FA methods based on telephony, while better
than no 2FA at all, are less effective than other methods. The
relative strength of authentication probably goes something like this:

telephony < soft tokens < hard tokens

but that would require further justification.

Tom