Hacker News Reader

Don't use SMS based 2FA.

NIST recommends against it because it's so easy to hijack.

Is it easy to break a SIM pin?

What about taking control of the phone number itself? Unauthorized porting can probably be accomplished with a bit of social engineering.