News for hackers. Stuff that matters.

A comment on NIST declares the age of SMS-based 2-factor authentication over. Parent comment

Re:NIST declares the age of SMS-based 2-factor authenticatio... by Nullabillity on Tuesday July 26, 2016 @04:45AM (#12164203)
All banks in Sweden have a similar scheme. It sends a token and a description to your phone on any mutating or authenticating operation, you input your code, and it signs the token and sends it back to the bank.
[ Parent | on HN ]
Re:NIST declares the age of SMS-based 2-factor authenticatio... by Natanael_L on Tuesday July 26, 2016 @07:35AM (#12164850)
The BankID app? Most banks also have hardware TOTP tokens.
[ Parent | on HN ]
Re:NIST declares the age of SMS-based 2-factor authenticatio... by Nullabillity on Tuesday July 26, 2016 @08:34AM (#12165134)
True, most banks have both. But the hardware tokens seem to be dying, slowly.

Personally I consider the transaction description a pretty killer feature of Mobilt BankID compared to the hardware tokens.

[ Parent | on HN ]