Ask HN: Bank with Yubikey support?

Re:Ask HN: Bank with Yubikey support? by GloriousKoji on Wednesday April 27, 2022 @02:56PM (#31184248)

The ONLY financial institute I trust with large sums of money and supports yubikey is Vanguard.

Also check out the list of works with yubikey, but it's super short and most of them are for crypto: https://www.yubico.com/works-with-yubikey/catalog/?usecase=1...

[ Parent | on HN ]

Re:Ask HN: Bank with Yubikey support? by whitepoplar on Wednesday April 27, 2022 @03:58PM (#31184966)

Last time I checked, Vanguard's implementation is worthless because you can still request an SMS code as an alternate path.

[ Parent | on HN ]

Re:Ask HN: Bank with Yubikey support? by atonse on Wednesday April 27, 2022 @08:33PM (#31187510)

Did I miss something? Is SMS totally broken?

I know it’s not encrypted but has it suddenly become easy to intercept?

[ Parent | on HN ]

Re:Ask HN: Bank with Yubikey support? by qmarchi on Wednesday April 27, 2022 @08:53PM (#31187649)

SMS is based on SS7 signaling, which is broken pretty bad: https://www.techtarget.com/whatis/definition/SS7-attack

There's also SIM-swap attacks that rely on social engineering your carrier.

[ Parent | on HN ]

Re:Ask HN: Bank with Yubikey support? by aaaaaaaaata on Thursday April 28, 2022 @10:49AM (#31193145)

Yes, to everything except "suddenly".

[ Parent | on HN ]