News for hackers. Stuff that matters.

A comment on Tell HN: Somebody implemented something I wrote a blog about. Parent comment

Re:Tell HN: Somebody implemented something I wrote a blog about by DangitBobby on Tuesday September 20, 2022 @10:06AM (#32911817)
I don't know of anyone who does 2FA this way.
[ Parent | on HN ]
Re:Tell HN: Somebody implemented something I wrote a blog about by Rygian on Tuesday September 20, 2022 @10:38AM (#32912220)
My employer does it for products requiring PCI certification. Our PCI auditor recommends it even though it's not a formal requirement of PCI v3.
[ Parent | on HN ]
Re:Tell HN: Somebody implemented something I wrote a blog about by darkarmani on Tuesday September 20, 2022 @11:12AM (#32912799)
That sounds like a terrible trade-off that makes people more likely to write down passwords on post-it notes or in a clear-text file to cut-n-paste. Especially if you lock accounts after a 10 tries or so (or PCI's ridiculous low number of tries).
[ Parent | on HN ]
Re:Tell HN: Somebody implemented something I wrote a blog about by rexfuzzle on Tuesday September 20, 2022 @10:10AM (#32911877)
This was posted above: https://www.isnic.is/en/site/login First time I've seen it too
[ Parent | on HN ]