4 ms·
I'm using ING DiBa in Germany and they lack a secure 2fa method. There are only two options available: - SMS-TAN, which is vulnerable to SS7 hijacking and name
by contrarian_ 9y ago
I'm using ING DiBa in Germany and they lack a secure 2fa method. There are only two options available:
- SMS-TAN, which is vulnerable to SS7 hijacking and name spoofing.
- Index-TAN, aka the enumerated paper slip, which is only "pseudo two-factor": If you computer is pwned, it can ask you for the index matching the attacker's desired transaction.
- BjoernKW 9y agoING DiBa offers banking apps for both iOS and Android, which can also serve as 2FA for online banking via the browser. The main banking app itself isn't all that good but the 2FA feature works fine.
- contrarian_ 9y agoCan't use those with HBCI. Also, I really wouldn't want my Android phone to serve as a single factor authentication method.