News for hackers. Stuff that matters.
Re:What Is Your Bank’s Security Banking On? by ktpsns on Wednesday March 07, 2018 @07:52AM (#16536010)
In Germany, we have the same system (Tan Generator, https://en.wikipedia.org/wiki/Transaction_authentication_num...). Actually, some banks provide Mobile TANs but we all know that this is eyewash with smartphones, whereas a Tan generator is an independent offline device.

However, there are also a number of loopholes. I can make a batch transfer of an arbitrary amount of money to a number of recipients with only a single TAN and this is not well integrated into the TAN generator device.

Re:What Is Your Bank’s Security Banking On? by zaarn on Wednesday March 07, 2018 @08:27AM (#16536168)
There is also smart@TAN or OptiTAN. It's essentially a 5€ device with photosensitive diodes that you press on your screen and print out the TAN.

IMO it's the best option if you don't want to use HBCI and Co.

Re:What Is Your Bank’s Security Banking On? by Cenk on Wednesday March 07, 2018 @09:45AM (#16536686)
I use one of those (it looks like this[0]) and am quite happy with it, especially compare to my Swedish bank account that uses a similar device (DigiPass [1]) but all the numbers have to be entered manually.

[0]: https://i.ebayimg.com/images/g/gtoAAOSw5zNalXj7/s-l300.jpg

[1]: https://img3.mp-farm.com/3458223.jpg?w=500&h=375&v=3

Re:What Is Your Bank’s Security Banking On? by zaarn on Wednesday March 07, 2018 @09:52AM (#16536737)
I basically got the first device. Very cheap and easy to use (unless you got your monitor out of arms reach, in this case I have to move the blinkenlicht to a monitor I can reach)