12 ms·
The only thing I wasn't able to do without so far is SMS 2nd factor. Dumbphone is enough for that. I don't mind if banks/govs require use of some protocol. But
by megous 5y ago
The only thing I wasn't able to do without so far is SMS 2nd factor. Dumbphone is enough for that.
I don't mind if banks/govs require use of some protocol. But forcing use of specific apps goes against past achievements to make public institutions use open formats and protocols, so I reject that where possible, or complain.
It should not be acceptable. I still remember times when people had to pirate MS office to be able to open some .doc from their gov, or use MS windows to run some proprietary form filling software. That's mostly a thing of the past, thankfully. "My-app or highway" attitude feels like a setback in that regard.
- sersi 5y agoMy banks no longer allow SMS 2fa. The only 2fa available are those through their mobile app. So without android or iOS banking will quickly become impossible. And I wish I could just switch banks but in some situation it's not possible and in the country I currently live in, it seems that now no banks support 2fa SMS for any transaction above a tiny amount anyway.
- ksec 5y agoIn additional to those comments on banking and 2FA, these banking apps also requires certain version of Android and IOS ( rightly so because of security concern ). Which means you are now, in some way forced to upgrade your phone every x years if your phone no longer gets any software update.
- realusername 5y agoIn Europe, SMS 2fa is getting deprecated in favor of apps, you can still get a device generating tokens sent by post in most banks but who knows for how long they will keep that running.
- calvin_ 5y agoMost of these apps are just dipping mustards around HOTP/TOTP, so it's a standard protocol. There's an ecosystem of standard applications around it; Twilio, Microsoft, and Google all make pretty popular ones.
- megous 5y agoThat sounds good, as long as the bank API for this is open and documented.