Why Canada’s banks have weaker passwords than Twitter or Google

Re:Why Canada’s banks have weaker passwords than Twitter or ... by kalleboo on Sunday June 08, 2014 @12:00PM (#7864991)

Both my Swedish banks require two-factor authentication - you get a physical PIN pad when you sign up, and you can also set up a 2-factor app on your phone. All transfer amounts and account numbers have to be signed on the PIN-pad, securing you from man in the middle attacks that are possible with one-time-codes. They both also have password-only login, but it's read-only, you can't do transfers.

I wonder what makes the banks in the two countries have such different views on security?

[ Parent | on HN ]

Re:Why Canada’s banks have weaker passwords than Twitter or ... by eli on Sunday June 08, 2014 @03:14PM (#7865537)

Out of curiosity, if someone does hack a Swedish bank and steals money, who takes the hit? The bank or the customer?

[ Parent | on HN ]

Re:Why Canada’s banks have weaker passwords than Twitter or ... by callesgg on Sunday June 08, 2014 @03:38PM (#7865623)

If the bank is hacked they, if you lose your hardware key generator and don't report the loos to the bank you. (The thief must have the device pin code to use it.)

Here is the device my bank uses. http://www.vasco.com/Images/DP%20260_DS201109-v1.pdf

[ Parent | on HN ]