News for hackers. Stuff that matters.
Re:On Cybersecurity and Being Targeted by TorKlingberg on Wednesday August 10, 2016 @05:23AM (#12260452)
> Also, where possible, use two-factor authentication.

I have turned on two-factor wherever possible, but I am thinking about turning it off again for PayPal. It sends an SMS every time I log in, even in their app or on a PC I have logged in on before. I wish they would keep a device authenticated at least a month or so, only asking for the password on each login.

Re:On Cybersecurity and Being Targeted by mtgx on Wednesday August 10, 2016 @05:31AM (#12260468)
Unfortunately, I had to disable SMS 2FA on Paypal. I got locked out multiple times for days because their system had issues and it wouldn't send me the SMS code. Eventually I had to call service support and get them to disable it so I can enter the account again. And I left it disabled.

Paypal is one of those services where it's very dumb not to have 2FA, but until they overhaul their 2FA system, or support something like a Yubikey/Nitrokey/U2F and Google Auth, I won't risk using it again.