News for hackers. Stuff that matters.

A comment on Why Canada’s banks have weaker passwords than Twitter or Google. Parent comment

Re:Why Canada’s banks have weaker passwords than Twitter or ... by vauth on Sunday June 08, 2014 @03:01PM (#7865502)
Yep, basically. Would you use it?
[ Parent | on HN ]
Re:Why Canada’s banks have weaker passwords than Twitter or ... by harshreality on Sunday June 08, 2014 @03:08PM (#7865522)
Probably not. While any additional factor makes authentication more secure, a voice line allows anyone nearby (or farther away with a unidirectional mic) to compromise that factor. Further, the false negative rate would concern me. What is wrong with TOTP 2-factor?
[ Parent | on HN ]
Re:Why Canada’s banks have weaker passwords than Twitter or ... by joesmo on Sunday June 08, 2014 @06:22PM (#7866134)
"What is wrong with TOTP 2-factor?"

Losing your phone effectively locks you out of all your 2-factor accounts. If it's stolen by the wrong people and unlocked/unencrypted, they'll get access to pretty much all of your accounts through a password reset. I'd say that's pretty bad and we have yet to find a good, secure way to authenticate users.

[ Parent | on HN ]