News for hackers. Stuff that matters.

A comment on What's the deal with all those weird wrong-number texts?. Parent comment

Re:What's the deal with all those weird wrong-number texts? by glogla on Saturday July 02, 2022 @06:27AM (#31957773)
Around here all banks that used SMS for 2FA did that. You'd get sms detailing the transaction - whether it's log in, transfer or anything. In case it is a transfer, the text included the amount and destination account.

Everyone mostly went to "authentication apps" now but those still show what are you confirming.

Not sure why it is not a common practice.

[ Parent | on HN ]
Re:What's the deal with all those weird wrong-number texts? by mormegil on Saturday July 02, 2022 @10:03AM (#31959069)
Yes, this is called WYSIWYS (what you see is what you sign) and I suffer whenever I receive a confirmation code saying absolutely nothing. However, when _you_ write the code to some trusted web app, there is that context, at least. But reading the code to some random person on the phone? No way!
[ Parent | on HN ]