News for hackers. Stuff that matters.

A comment on Why are banks still getting authentication so wrong?. Parent comment

Re:Why are banks still getting authentication so wrong? by speckx on Tuesday May 13, 2025 @04:58PM (#43977662)
I was surprised that Bank of America still does SMS based 2FA.
[ Parent | on HN ]
Re:Why are banks still getting authentication so wrong? by dmoy on Tuesday May 13, 2025 @05:29PM (#43977927)
BoA is one of the very few US banks that do any modern auth - they support fido2 security keys.

Of course effectively 0% of their customers actually use it, and instead rely on sms

[ Parent | on HN ]
Re:Why are banks still getting authentication so wrong? by kccqzy on Tuesday May 13, 2025 @06:12PM (#43978332)
Huh I set up SMS 2FA for BofA back in 2016 and I never knew they now support fido2.
[ Parent | on HN ]
Re:Why are banks still getting authentication so wrong? by dmoy on Wednesday May 14, 2025 @11:13AM (#43985535)
They don't let you get rid of sms fallback, so it's not immune to sim theft

It does help vs phishing though

[ Parent | on HN ]