3 ms·
Here's the same story without 2FA: "You get an urgent message from your bank about an unexpected $500 transaction, you follow the link & you need to enter your
by jsnell 5y ago
Here's the same story without 2FA:
"You get an urgent message from your bank about an unexpected $500 transaction, you follow the link & you need to enter your password as usual of course. It was a phishing website. Your bank account will be emptied."
It did not reduce security.
- tialaramex 5y agoBut in your revised story I don't receive reassurance that everything is going as planned. That's what I'm getting at, the SMS step is reassuring even though it actually shouldn't be.
- jsnell 5y agoIf there is no 2FA, not being asked for a confirmation code is things going as normal. Also, it's totally irrelevant whether the user gets cold feet since in the password-only world they've just handed away the keys to the kingdom.