News for hackers. Stuff that matters.

A comment on Three Years in Identity Theft Hell. Parent comment

Re:Three Years in Identity Theft Hell by kristofferR on Saturday September 16, 2017 @11:15PM (#15268069)
Norway has a great system called BankID. To sign-up/login to all banks, government services and other places where you need to verify your identity you enter your SSN, personal password and code from your 2FA device (which banks give you freely)/phone app.

https://www.bankid.no/en/

[ Parent | on HN ]
Re:Three Years in Identity Theft Hell by zAy0LfpBZLC8mAC on Sunday September 17, 2017 @07:35AM (#15269164)
In other words, you also have a system of password reuse (a personal password instead of a per-account password?!)?

Also, how is the reliability of the 2FA device established? If there were some claim before a court that you authorized some sort of transaction, what would they have to demonstrate to prove your liability? What will the court do if you question whether the numbers generated by the 2FA device are actually cryptographically random?

[ Parent | on HN ]