SMS Codes and 2FA: The Security Blanket That's Full of Holes
SMS and authenticator codes beat a lone password, but they're still phishable, SIM-swappable, and vulnerable to push fatigue. Here's where the 2FA blanket has holes, and why passkeys replace the password instead of patching it.