News for hackers. Stuff that matters.
Re:Tell HN: SMS-based two-factor authentication is not secure by LinuxBender on Wednesday June 09, 2021 @10:17AM (#27448130)
And the site has to support U2F. U2F is a great standard but almost none of the businesses I interact with support it. There are maybe 3 banks in the US that support it, but not mine.
Re:Tell HN: SMS-based two-factor authentication is not secure by FabHK on Wednesday June 09, 2021 @01:50PM (#27450907)
I don't understand why banks and businesses don't outsource the whole authentication business to someone that does nothing else, and then does proper 2FA (maybe with a choice of security levels), and supports as many standardised solutions as possible.