The real threat is sim-swap attacks. I imagine the FBI can just request access to your github account with or without the 2FA.

Reply to this note

Please Login to reply.

Discussion

Yeah I don't use sms 2fa when I can avoid it.