3 ms·
> Or a hardware token The trouble is with the user (the user is always the problem). What happens if they lose their hardware token? You must have a way to rec
by BinaryIdiot 10y ago
> Or a hardware token
The trouble is with the user (the user is always the problem). What happens if they lose their hardware token? You must have a way to recover that is not exploitable by bad guys but usable by the good people just trying to get back into their account.
SMS fills this pretty well despite its security flaws. I'm not convinced hardware fixes this, at least not in any current form I've seen.
- mtgx 10y agoMy bank gives out hardware tokens. It's super easy to use, and I trust it way more than using SMS, even though they tried to push me over to using SMS (probably cost cutting move on their part). When it gets lost, they can replace it.
- BinaryIdiot 10y agoThat sounds like a pretty miserable user experience though. People are forgetful and lose things. Doing something online for the ease of it only to have to wait for something physical seems like a big step backwards as far as UX is concerned. Until you make good security dead simple it'll never be used by the majority.