“We found PayPal vulnerabilities and PayPal punished us for it”

Re:“We found PayPal vulnerabilities and PayPal punished us f... by disiplus on Monday February 24, 2020 @10:48AM (#22405015)

it's not just email, its phone also.

i recently recently logged inco company paypal from out of country and paypal complained it wants to confirm account via email, fine i confirmed. and then it said it also needs to conform the via phone. ie a call.

so it is a form of 2fa.

can i also complain how is 2fa a pain if multiple persons use that account. you cannot enable it if they allow only one user per account. there are workarounds where there are mutiple 2fa methods and i use the app and other person sms.

[ Parent | on HN ]

Re:“We found PayPal vulnerabilities and PayPal punished us f... by nebulous1 on Monday February 24, 2020 @11:38AM (#22405572)

I haven't looked at PayPal specifically, but if it's a standard authenticator app can you not both set it up via the QR code when you enable it while everybody is present?

However, obviously the real answer is to add multiple users to the same paypal account, which apparently you can do with a PayPal Business account.

[ Parent | on HN ]

Re:“We found PayPal vulnerabilities and PayPal punished us f... by disiplus on Monday February 24, 2020 @11:47AM (#22405663)

yeah, you are right, for totp it should work.

[ Parent | on HN ]