Hacker News Reader

Why is SMS auth (like my bank does, with plain HTML/CSS pages) not sufficient?

Anyways, my government is sending me SMS for auth anyways and won't stop anytime soon. No need to introduce yet another requirement on the citizens.

View on HN

Because it's too easy to convince carriers to port someone else's phone number to a new SIM. I wish the carriers would address that, but that too would likely require some sort of government intervention.

Alas, if only the government could provide government intervention? Since they can't, we're left only with the option of government intervention to mandate use of android or iOS?

In fact, intervention wouldn't have to be to change SMS. They could instead mandate a standard like U2F or FIDO2. If they really don't like those for some reason, EU states could get together and make a new standard and mandate that.

I agree with this take! I was trying to defend the Digital Markets Act, and was responding to someone who (as far as I could tell) appeared to be fundamentally against any or at least most government regulation.

Yeah, especially if it's not absolutely necessary (e.g. the goal would be otherwise impossible).

I'd be okay if they regulated telco carriers a little bit more than they already do; much more okay than with anything resembling what they're trying to do now.

Reply on news.ycombinator.com