3 ms·

Last July, NIST called out SMS 2FA as insecure https://www.schneier.com/blog/archives/2016/08/nist_is_no_long.html https://www.schneier.com/blog/archives/2016/

by danjoc 9y ago

Last July, NIST called out SMS 2FA as insecure https://www.schneier.com/blog/archives/2016/08/nist_is_no_long.html https://www.schneier.com/blog/archives/2016/08/nist_is_no_lo... Second comment: SMS should have been removed long time ago considering the SS7 problems. Better to use a secure token. Is the bank taking responsibility and covering the loss for their customers?

runeks 9y ago
> Is the bank taking responsibility and covering the loss for their customers? I think they should be required to. Although, isn't it possible that the sum of withdrawn amounts could be so large that the bank simply can't cover the loss, thus making it insolvent?
- jessaustin 9y ago
  Haha there should be a rule about double-checking transfers that could break the bank.