News for hackers. Stuff that matters.

A comment on Google: Security Keys Neutralized Employee Phishing. Parent comment

Re:Google: Security Keys Neutralized Employee Phishing by packet_nerd on Monday July 23, 2018 @02:24PM (#17594673)
I needed a new bank and thought surely there will be one that offers U2F.. days of searching later, and I still have yet to find one that does. It seems like the vast majority of online banks don't even support any kind of 2FA except email/text. Really really sad.

For regular guys like me, I can't think of any online service more important to protect than my bank account.

[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by sGatling1788 on Monday July 23, 2018 @02:38PM (#17594794)
From https://twofactorauth.org/#banking, the only American or Canadian bank that supports a Hardware Token is Wells Fargo - which only seems to support RSA SecurID: https://www.wellsfargo.com/privacy-security/advanced-access
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by macintux on Monday July 23, 2018 @03:35PM (#17595288)
Banks seem very slow to adapt to technology. My credit union for years after the release of the first iPhone still used a Flash login, although they did have a mobile login link you could get from them by asking.
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by jakubp on Monday July 23, 2018 @04:24PM (#17595661)
FWIW, in Poland some banks started using 2FA (many different types) several years before Google or any other site I know of.
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by Arainach on Tuesday July 24, 2018 @12:15AM (#17598072)
Vanguard supports U2F. https://investor.vanguard.com/security/security-keys
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by everybodyknows on Tuesday July 24, 2018 @01:17AM (#17598282)
Yet only Chrome is supported -- and this does not include chromium-browser on Linux.
[ Parent | on HN ]
Re:Google: Security Keys Neutralized Employee Phishing by rendaw on Tuesday July 24, 2018 @03:31AM (#17598842)
It sounds like they force you to use a phone/email code when you log in from a new device? Or am I reading that wrong.
[ Parent | on HN ]