And when I call these places and ask why they don't support TOTP they don't even know what I'm talking about.
I had one big corporation named Chase Bank that I won't name fight with me over how this (SMS) was more secure than anything else, including email or a VOIP number behind a strong password, as well as TOTP.
When I mentioned that my carrier had several successful SIM attacks over the past few years, the dude simply repeated how secure it was.
(post is archived)