News for hackers. Stuff that matters.

A comment on Thieves drain 2FA-protected bank accounts by abusing SS7 routing protocol. Parent comment

Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by dublinben on Thursday May 04, 2017 @06:47PM (#14269552)
At least TOTP (and U2F) are standards. All sites and organizations should be using them, not something they've created themselves.
[ Parent | on HN ]
Re:Thieves drain 2FA-protected bank accounts by abusing SS7 ... by toast0 on Friday May 05, 2017 @10:53AM (#14273852)
DUO and other similar tools where you accept on the phone instead of getting a code and having to type it in can be more convenient than typing; and provided you get the push, you can take care of it from the notification so you don't have to find the app, so it's not terrible if you need seven different apps.
[ Parent | on HN ]