3 ms·
Sure, but those laws don't require 2FA (maybe they should) and Robinhood is far from the only institution that doesn't require it. A startling lot still think
by bigbubba 6y ago
Sure, but those laws don't require 2FA (maybe they should) and Robinhood is far from the only institution that doesn't require it. A startling lot still think 'state your name, SSN/PIN/ or account number and birthday over the telephone' is sufficient.
- bostik 6y ago> Sure, but those laws don't require 2FA Funny that. The PSD2 regulations in Europe do.[0] The downside is that they don't mandate properly secure 2FA, so we have a mishmash of SMS, time-based tokens and whatever else passes for various banks under the regulations.[ß] 0: https://www.bankinfosecurity.com/psd2-authentication-requirements-implementation-hurdles-a-13086 https://www.bankinfosecurity.com/psd2-authentication-require... ß: My UK bank requires locally generated, time-based reader/app tokens, and has done so as long as I've lived here. My Finnish bank uses SMS.