News for hackers. Stuff that matters.
Re:The Vietnam government has banned rooted phones from usin... by fph on Friday January 09, 2026 @02:50PM (#46558376)
Precisely. You can use and old-style hardware token that only generates numbers to log in, but not to authorize an operation such as a money transfer.

The requirement is called "dynamic linking" (the 2FA code must be tied to the specific transaction) and the relevant regulation is PSD2.

Re:The Vietnam government has banned rooted phones from usin... by miahi on Friday January 09, 2026 @05:20PM (#46560231)
There are "simple" hardware tokens that allow for that - you have to enter the amount and part of the destination IBAN and they generate a 2FA number based on that + probably the same number generator it uses for logins.