News for hackers. Stuff that matters.
Re:Robinhood Accounts Looted, No Customer Support by dmoy on Friday October 09, 2020 @06:59PM (#24735280)
The only US brokerage that offers real 2fa is vanguard (last I checked), and even they mess it up by allowing sms fallback.

It still will allow you to avoid phishing if you never use the sms fallback, but it does make you vulnerable to sim attacks of the variety "convince phone store rep to replace 'your' lost sim card"

Re:Robinhood Accounts Looted, No Customer Support by jrib on Saturday October 10, 2020 @09:48AM (#24738981)
What makes Schwab's implementation with a hard token not "real"?
Re:Robinhood Accounts Looted, No Customer Support by dmoy on Saturday October 10, 2020 @12:19PM (#24739939)
Because it's still trivially vulnerable to phishing

Any kind of otp/totp leaves you with too much risk