News for hackers. Stuff that matters.

A comment on Visa Buys Plaid. Parent comment

Re:Visa Buys Plaid by nikolay on Tuesday January 14, 2020 @02:32AM (#22042645)
That's default, but you can buy an RSA hardware token.
[ Parent | on HN ]
Re:Visa Buys Plaid by pintxo on Tuesday January 14, 2020 @05:25AM (#22043477)
Like this one [1]? Seems that it is not necessarily better than SMS.

[1] https://news.ycombinator.com/item?id=4156897

[ Parent | on HN ]
Re:Visa Buys Plaid by freeone3000 on Tuesday January 14, 2020 @09:50AM (#22045163)
There is an actual, material difference between having no 2FA (guess passwords until you get in), SMS 2FA (have a human person call a phone provider and have the number switched), and token 2FA (given the physical device and a few hundred attempts, you're able to make another device that also authenticates). Saying you might as well not enable 2FA because a token cloning attack exists is ridiculous.
[ Parent | on HN ]
Re:Visa Buys Plaid by projektfu on Tuesday January 14, 2020 @10:50AM (#22045888)
And it's not even an attack on the OTP token.
[ Parent | on HN ]