Why SMS two-factor authentication codes aren't safe and what to use instead
Briefly

Recent investigations reveal that SMS codes for two-factor authentication, often seen as a secure method for identity verification, are managed by third-party service providers such as Fink Telecom Services. Despite their crucial role in security, this Swiss company has a controversial background, including ties to government surveillance and a record of privacy breaches. Major tech companies and financial entities like Google, Meta, and various banks have been implicated in relying on these services, rendering the security of this authentication method questionable.
The company and its founder have worked with government spy agencies and surveillance industry contractors to surveil mobile phones and track user location.
Companies like Google, Meta, and Amazon, among others, have relied on an outside provider called Fink Telecom Services for sending SMS-based two-factor authentication codes.
Read at ZDNET
[
|
]