Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ...
by otterley on Thursday May 04, 2017 @01:45PM
(#14266983)
There are plenty of second-factor mobile apps as well: Duo, Authy, Google Authenticator, and Symantec VIP access, just to name a few.
[ Parent
| on HN ]
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ...
by techsupporter on Thursday May 04, 2017 @02:47PM
(#14267559)
And now I'm trapped in this multi-app universe where every entity uses a different app. My employer uses Symantec, my school uses Duo, my bank has its own app (as does Steam), and a handful of sites use TOTP.
Argh.
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ...
by dublinben on Thursday May 04, 2017 @06:47PM
(#14269552)
At least TOTP (and U2F) are standards. All sites and organizations should be using them, not something they've created themselves.
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ...
by toast0 on Friday May 05, 2017 @10:53AM
(#14273852)
DUO and other similar tools where you accept on the phone instead of getting a code and having to type it in can be more convenient than typing; and provided you get the push, you can take care of it from the notification so you don't have to find the app, so it's not terrible if you need seven different apps.