> From: ", Flora" <http://www.vermont.gov/~Flora.> > Date: Mon, 13 Jun 2016 18:45:38 +0000 > > Unless your email gets hacked... Right. But, in order to get your twitter hacked, the perpetrator would need to compromise both your twitter account and your email account. Also, you are in the control the email address's password (PIN) and can change it at a whim, unlike needing to call your phone company to change it. > My cell phone does require a password and pin. This is really good. > I think that social engineering > is a very real problem. > > -----Original Message----- > From: Robert [http://dummy.us.eu.org/robert] > Sent: Monday, June 13, 2016 2:11 PM > > > From: Flora <http://www.gmail.com/~flora> > Date: Mon, 13 Jun 2016 13:43: > > 21 -0400 > > Please remember the importance of two factor authentication > > and > password/pin for your phone. > > I disagree with the conclusion about Deray Mckesson's story. I think the > better conclusion is that, if given an option, the second form of > authentication should be an email address. It's a lot harder to use social > engineering (in this case, convincing Verizon about changing SIM > cards) with email providers.