News for hackers. Stuff that matters.

A comment on Big U.S. Banks Are Stiffing Account Takeover Victims. Parent comment

Re:Big U.S. Banks Are Stiffing Account Takeover Victims by auxym on Friday October 07, 2022 @03:30PM (#33125866)
I believe Scotia/Tangerine are still 6-digits only for passwords. Really. And I have yet to see any Canadian financial institution (whether bank, brokerage, credit union, etc) that supports anything else than SMS for 2FA.

The situation is quite rough indeed.

[ Parent | on HN ]
Re:Big U.S. Banks Are Stiffing Account Takeover Victims by angst_ridden on Friday October 07, 2022 @03:45PM (#33126043)
RBC allows use of their mobile app as 2FA. I don't believe it uses SMS under the hood.

I'm not arguing it's necessarily more secure. I haven't audited it or looked into how it works.

[ Parent | on HN ]