News for hackers. Stuff that matters.

A comment on Ask HN: Why are SIM cards still a thing?. Parent comment

Re:Ask HN: Why are SIM cards still a thing? by Strom on Sunday October 30, 2016 @07:12AM (#12829173)
In Estonia, you can use your SIM to create a government recognizeed digital signature. [1] Thus, you not only identify yourself to the mobile operator, but you can also identify yourself to banks, government services, and more.

[1] https://e-estonia.com/component/mobile-id/

[ Parent | on HN ]
Re:Ask HN: Why are SIM cards still a thing? by anlif on Sunday October 30, 2016 @07:23AM (#12829202)
The same idea is used in Norway. Most banks and public services (e.g. tax returns) use this system for online two-factor authentication.

[1] https://www.bankid.no/en/

[ Parent | on HN ]
Re:Ask HN: Why are SIM cards still a thing? by shshhdhs on Sunday October 30, 2016 @11:54AM (#12830447)
Didn't NIST just say two factor via mobile is a "bad idea"? Have Norway or Estonia responded?

EDIT: Thank you whoever downvoted an honest question that added to the discussion

[ Parent | on HN ]
Re:Ask HN: Why are SIM cards still a thing? by brainfire on Sunday October 30, 2016 @12:00PM (#12830479)
The bad idea is being sent a (potentially interceptable) SMS with a code.

The Estonian method is described as using a private key present on the SIM card, just like a normal smart card used for authenticating/signing.

[ Parent | on HN ]
Re:Ask HN: Why are SIM cards still a thing? by candiodari on Wednesday November 02, 2016 @06:13AM (#12853373)
That's how every bank I know in Australia, at least 2 US banks and 4 European banks do it. Transfer (sometimes login too) ? Code over SMS.

Besides, pretty much all banks simply use 2 or 3 factor authentication as an anticompetitive tactic (half the businesses in most countries pay the banks 2-300$ per month just for scheduled download of transactions)

[ Parent | on HN ]
Re:Ask HN: Why are SIM cards still a thing? by captn3m0 on Sunday October 30, 2016 @11:58AM (#12830474)
I think that was for SMS, not specifically mobile.
[ Parent | on HN ]
Re:Ask HN: Why are SIM cards still a thing? by rimantas on Sunday October 30, 2016 @06:37PM (#12832883)
Same in Lithuania. Have been using mobile signatyre as it is called for yeats, very convenient.
[ Parent | on HN ]