News for hackers. Stuff that matters.
Re:Ask HN: Gmail account security by nextos on Sunday January 23, 2022 @08:09PM (#30052451)
That's interesting. What 2FA system do they use exactly?

AFAIK, N26 still uses on-time codes sent by SMS which I regard as very insecure.

Re:Ask HN: Gmail account security by jounker on Friday January 28, 2022 @02:57PM (#30119541)
It had completely depended on the bank. In the Netherlands, 20 years ago it was a hardware OTP device. Same with a big Swiss bank ten years ago. Up until a few years ago with a big german bank it was a physical sheet of OTPs. Now it’s a mobile app that either recognizes a challenge image, or receives a challenge by network.
Re:Ask HN: Gmail account security by Semaphor on Sunday January 23, 2022 @09:44PM (#30053113)
N26 has always used their proprietary app confirmation. I never (in over 5 years) got an SMS instead from them. But that’s in Germany, maybe it differs between countries?