Two-factor via SMS: lazy safety net or a hole waiting to be picked?
I keep seeing people on here say SMS 2FA is totally useless after that 2022 Uber breach where a teen got in through a SIM swap. But my uncle runs a small shop in Tulsa and turning on text codes cut his fake login alerts from about 40 a week down to almost nothing. So is it dumb to tell regular folks SMS is fine if the alternative is no 2FA at all, or should we push app codes for everyone? What do you all actually recommend to family and friends?