4 ms·

It depends per bank; mine discontinued the paper OTP pad as well as the SMS codes, and gave me a separate 2FA device when I didn't want to use their app. I don'

by gpvos 5y ago

It depends per bank; mine discontinued the paper OTP pad as well as the SMS codes, and gave me a separate 2FA device when I didn't want to use their app. I don't think banks can force you to have a smartphone yet.

krageon 5y ago
> I don't think banks can force you They can and do. There are a number of banks where you have absolutely no choice.
- jiggunjer 5y ago
  you have a choice to not be their customer.
  - krageon 5y ago
    unless of course they are all equally bad :)
robocat 5y ago
> separate 2FA device FYI in New Zealand a few banks can provide a device (e.g. RSA SecurID) for proper non-bank 2 factor auth with consumer accounts. However some major banks only use phones for 2FA (app or SMS). The norms seem to vary considerably depending on country.
- PostOnce 5y ago
  Which banks provide a device?
  - robocat 5y ago
    I have had SecurID tokens for ASB and SBS accounts. I have been told Westpac does not provide secure 2FA. I am not sure about other banks.
bubblethink 5y ago
Does nobody in the EU do computers ? How do they pass asinine laws like this ? I mean, from the outside, it always appears as though the EU is much better than the US when it comes to consumer rights, but it always feels like they don't have a very good grip on technology.
- gpvos 5y ago
  I don't think this was driven by law, but by an appropriate wish to increase transaction security (you really shouldn't use SMS for this anymore). There are some rules here that are nonsense, such as know-your-customer laws that force me to enter my home address even when the product or service (say, a concert or train ticket) is delivered to me entirely electronically. Most of the move to purely electronic payment is driven by the market and the large banks; e.g. in the Netherlands we actually never had laws that force shops to accept cash as payment.
  - bubblethink 5y ago
    I agree that you shouldn't use SMS. My point was that unless the law (if there is one), requires that 2FA be enabled in an accessible way, the banks will do their own thing with the phone push notification system. The 2FA situation is quite bad in the US too, but a small no. of banks do offer TOTP.
    - toastal 5y ago
      This whole situation caused me to throw up my hands in Thailand and now I pay for most everything in cash since it's still a cash-friendly nation.
- inside_out_life 5y ago
  It's hard to explain but Poland got hooked on mobile payments/banking, the adoption is very high and one of the major players is home grown.
  - mateuszf 5y ago

by gpvos 5y ago

krageon 5y ago

> I don't think banks can force you They can and do. There are a number of banks where you have absolutely no choice.

jiggunjer 5y ago
you have a choice to not be their customer.
- krageon 5y ago
  unless of course they are all equally bad :)

robocat 5y ago

> separate 2FA device FYI in New Zealand a few banks can provide a device (e.g. RSA SecurID) for proper non-bank 2 factor auth with consumer accounts. However some major banks only use phones for 2FA (app or SMS). The norms seem to vary considerably depending on country.

PostOnce 5y ago
Which banks provide a device?
- robocat 5y ago
  I have had SecurID tokens for ASB and SBS accounts. I have been told Westpac does not provide secure 2FA. I am not sure about other banks.

bubblethink 5y ago

Does nobody in the EU do computers ? How do they pass asinine laws like this ? I mean, from the outside, it always appears as though the EU is much better than the US when it comes to consumer rights, but it always feels like they don't have a very good grip on technology.

gpvos 5y ago
I don't think this was driven by law, but by an appropriate wish to increase transaction security (you really shouldn't use SMS for this anymore). There are some rules here that are nonsense, such as know-your-customer laws that force me to enter my home address even when the product or service (say, a concert or train ticket) is delivered to me entirely electronically. Most of the move to purely electronic payment is driven by the market and the large banks; e.g. in the Netherlands we actually never had laws that force shops to accept cash as payment.
- bubblethink 5y ago
  I agree that you shouldn't use SMS. My point was that unless the law (if there is one), requires that 2FA be enabled in an accessible way, the banks will do their own thing with the phone push notification system. The 2FA situation is quite bad in the US too, but a small no. of banks do offer TOTP.
  - toastal 5y ago
    This whole situation caused me to throw up my hands in Thailand and now I pay for most everything in cash since it's still a cash-friendly nation.
inside_out_life 5y ago
It's hard to explain but Poland got hooked on mobile payments/banking, the adoption is very high and one of the major players is home grown.
- mateuszf 5y ago