On 6-10-2009 0:20, Darren New wrote:
> andrel wrote:
>> Same sort of procedure?
> 
> They're trusting the phone company to be harder to pervert than your 
> password. They're trusting that an SMS sent to you is more likely to go 
> to you than the bad guy breaking in.

Or at least that a bad guy needs to steal your phone *and* to hack your 
account. Doing both in a short timespan is significantly less likely 
than one of them.

> 
>>> I think both google and facebook allow that too, but that's to cut 
>>> down on spam, or some such.
>>
>> How does that work?
> 
> It's been a while, but I think it involves not having to enter a captcha 
> once you do this once with your cell phone. I.e., you've proven you're a 
> person (because obviously they're not going to let 300 accounts use the 
> same cell phone number), so you don't have to reconfirm that this 
> account is a real person.

Makes sense.

Post a reply to this message