Twitter creates "Digits": a replacement for email and passwords

[Dietrichw]

Source

 

 

In San Francisco Twitter announced Digits, a new way to login to apps using your phone number. Users will no longer have to go through the process of entering a email and password for every new account. Users enter their phone number in order to receive a single use code similar to how 2 step verification with SMS works. Digits does not require a Twitter account, it will be an API that can be used on iOS, Android, and the web. Digits  supports a second factor of authentication by sending users a secondary PIN code to use with the expiring code.

 

Twitter says it is bringing everything it has learned about security since its founding to Digits. "Passwords just suck," Ducker says. "I go to dinner parties and people say, 'Oh, you work in tech? Can you get rid of the password?' And we’re finally getting rid of the password, for the vast majority of use cases."

[Jobbe03]

"similar to how 2 step verification with SMS works"

 

Isn't this exactly how 2 step verification with sms works? 

[Dietrichw]

"similar to how 2 step verification with SMS works"

 

Isn't this exactly how 2 step verification with sms works? 

step 2 is now step 1

[Shalashaska]

I would think this is could be used for data mining but the apps collect your numbers while running anyway now.

[Xquisite]

It isn't similar, that's exactly how it works.. :3

 

"similar to how 2 step verification with SMS works"

 

Isn't this exactly how 2 step verification with sms works?

[Jobbe03]

step 2 is now step 1

Well yeah... Technically i guess. 

[zanduh]

So instead of 2 step verification

We just have 1 step verification

 

And I have autofill on my personal computer no thank you to pulling out my phone to do this

[colonel_mortis]

The problem with this is that on the majority of people's phones, SMS's show up on their lock screen, so if you stole someone's phone, it would not be difficult to obtain access to all of their accounts which use this security format. It works great for 2FA (because to steal your password AND have access to your phone is much more difficult), but I for one will not be using a feature like this.

[Titanicium]

The problem with this is that on the majority of people's phones, SMS's show up on their lock screen, so if you stole someone's phone, it would not be difficult to obtain access to all of their accounts which use this security format. It works great for 2FA (because to steal your password AND have access to your phone is much more difficult), but I for one will not be using a feature like this.

In this case it doesn't. Try using 2-step verification for g-mail. It formats the SMS in a way which means the number doesn't come up on the lock screen (writes lots of bullshit before it in the text).

I for one will therefore be using this system

[dfsdfgfkjsefoiqzemnd]

So basically they "brought everything they have learned about security" and came up with something that already exists?