3 ms·
1. One SMS every 90 days, because the security teams have no idea how MFA works (I know, I work there). Even if you hop devices. See https://try.popho.be/psd2.h
by moviuro 6y ago
1. One SMS every 90 days, because the security teams have no idea how MFA works (I know, I work there). Even if you hop devices. See https://try.popho.be/psd2.html https://try.popho.be/psd2.html
2. It's just a little dev step away: http://blog.cmpxchg8b.com/2020/07/you-dont-need-sms-2fa.html http://blog.cmpxchg8b.com/2020/07/you-dont-need-sms-2fa.html . Phish kits will evolve, UX will still be bad, and phishing will still happen.
See also https://sakurity.com/blog/2015/07/18/2fa.html https://sakurity.com/blog/2015/07/18/2fa.html
- raverbashing 6y agoSome banks know security better than others And yes the login one might be every 90 days, but to do a transaction there might be an extra one (yes Germany did away with paper tans (2fa codes) in 2019 yay - thankfully not all banks are that stupid)
- kwhitefoot 6y ago> 1. One SMS every 90 days, Wow that's bad. Here in Norway we use a system called BankID that uses the SIM in your mobile and it does it every time I log in.