News for hackers. Stuff that matters.
Re:Why are banks still getting authentication so wrong? by SoftTalker on Tuesday May 13, 2025 @05:55PM (#43978211)
People get new phones and new phone numbers. Frequently, compared to landline days. The alternative is to be permanently locked out of everything if you get a new phone number.
Re:Why are banks still getting authentication so wrong? by lxgr on Tuesday May 13, 2025 @06:03PM (#43978267)
Well, I’m not doing business with a company that trusts any random phone carrier’s identity assertion more than me in determining what is and isn’t my phone number, so I guess it works out nicely.

And if a company can’t be bothered to have a fallback verification flow in case I do lose access to my phone number somehow, that doesn’t increase confidence either. I’m a person, not a phone number.

Re:Why are banks still getting authentication so wrong? by Henchman21 on Tuesday May 13, 2025 @07:51PM (#43979180)
So, if I may ask, do you have a smartphone? What kind and who is your carrier? It seems to me your stance would preclude owning a smartphone?
Re:Why are banks still getting authentication so wrong? by lxgr on Tuesday May 13, 2025 @08:17PM (#43979372)
I do, but that doesn't mean I need to participate in ridiculous forms of authentication.
Re:Why are banks still getting authentication so wrong? by ethbr1 on Wednesday May 14, 2025 @12:21AM (#43980769)
The parent's gripe is presumably about many bad SMS-based 2FA implementations banning non-post-paid numbers from use.

E.g. Blizzard (assuming they still do this)

If they want to be aggressive about fraudulent activity, fine, but don't restrict perfectly valid phone numbers from being used in their required 2FA scheme.