How I discovered the underground world of credit card network exploitation

Re:How I discovered the underground world of credit card net... by toomuchtodo on Wednesday August 02, 2023 @12:04PM (#36972767)

> With phone 2FA all that needs to happen is you have your phone and wallet stolen.

Are device passcode and app biometrics insufficient security measures in the event of device theft?

[ Parent | on HN ]

Re:How I discovered the underground world of credit card net... by joncrocks on Wednesday August 02, 2023 @12:30PM (#36973162)

If you have your phone set to wake-up/show notifications on new messages, and your bank simply sends an SMS code as verification, then the thief can just read the message(s) when they come in and input them.

[ Parent | on HN ]

Re:How I discovered the underground world of credit card net... by dkjaudyeqooe on Wednesday August 02, 2023 @12:51PM (#36973445)

You have the option to hide the actual message, at least on Android.

[ Parent | on HN ]

Re:How I discovered the underground world of credit card net... by l__l on Wednesday August 02, 2023 @01:05PM (#36973642)

Last I checked this was opt-in on Android; it's been default on iOS since I think 2017ish?

[ Parent | on HN ]

Re:How I discovered the underground world of credit card net... by J_Shelby_J on Wednesday August 02, 2023 @02:38PM (#36975065)

If they have your device pin code and your device, they have control of your entire digital life.

We’ve never been more vulnerable to petty crime.

[ Parent | on HN ]