News for hackers. Stuff that matters.
Re:Columnist asked researchers what they could find out from... by stenl on Thursday August 15, 2019 @10:07AM (#20705303)
In Sweden, the password is BankId, a two-factor authentication app that everybody has on their phones. It’s used by all government agencies, banks and insurance companies etc to establish identity. You literally use your ssn as username to login, plus a pin, to generate a one-time passcode (which happens behind the scenes so you don’t have type it in).
Re:Columnist asked researchers what they could find out from... by umanwizard on Thursday August 15, 2019 @10:23AM (#20705456)
What if you don’t have a phone?
Re:Columnist asked researchers what they could find out from... by intarga on Thursday August 15, 2019 @10:42AM (#20705628)
Not a swede, but we have a similar system in Norway. If you don't have a phone you can get this little device with a 7-segment display and a button that generates one-time authentication codes.
Re:Columnist asked researchers what they could find out from... by swebs on Thursday August 15, 2019 @10:52AM (#20705711)
I know when you make an account with Nordea, they give you a page with several hundred codes printed on it. Each time you authenticate, you have to use the next code in the list. If you use any other code on the page, it's considered invalid. They instruct you not to mark the page so if someone takes your code page they do not know which one is the current code.
Re:Columnist asked researchers what they could find out from... by grimjack00 on Thursday August 15, 2019 @11:19AM (#20705954)
But then, how does the account holder know which is the current one?
Re:Columnist asked researchers what they could find out from... by swebs on Thursday August 15, 2019 @01:14PM (#20707292)
In theory, by remembering the last one you used.

In practice, by just marking the damn pages.

Re:Columnist asked researchers what they could find out from... by theptip on Thursday August 15, 2019 @11:43AM (#20706185)
How does an account holder know what their password is?

(They remember it, or they write it down and store it with their other valuable pieces of paper.)

Re:Columnist asked researchers what they could find out from... by stenl on Friday August 16, 2019 @03:08AM (#20712823)
Everybody (90% of over-12s) has a smartphone but you can also use a computer. 98% have internet at home.

Edit: latest statistics show >95% have BankId on a smartphone. See https://www.bankid.com/assets/bankid/stats/2019/statistik-20...