4 ms·

You realize you're applying your own "acceptable amount of security" and expecting bank users to be this sophisticated? lol. If you're gonna advocate for bette

You realize you're applying your own "acceptable amount of security" and expecting bank users to be this sophisticated? lol. If you're gonna advocate for better security when it comes to authenticating your banking details, please, for everyone's sake; don't just shift the attack vector to another service and claim it's superior because YOU use TOTP 2FA with YOUR email account. Be better to advocate that services use TOTP 2FA directly.

latchkey 4y ago
I'd argue that even without 2FA on email, it is still less risk than simjacking.
- joshmanders 4y ago
  I think you over estimate how hard it is to simjack vs bruteforcing a simple password to email.
  - latchkey 4y ago
    Disagree [0]. Name one major email provider that doesn't have bruteforce protection. This is a silly circular argument anyway. You're just upset that I'd have the gall to suggest that you use online banking to someone who lives in a rural town in Iowa. Instead, you keep pontificating on the level of security between email and sms... while at the same time, being perfectly ok with using a bank that only offers sms 2fa. Facepalm. At the end of the day, neither matter... your funds get stolen from simjacking because a bank only offers that as protection? Read this [1]... max loss is $500 and more likely $0. This is bike shedding a moot issue. 2fa is more relevant for other issues. Have a nice day, sir. [0] https://www.ic3.gov/Media/Y2022/PSA220208 https://www.ic3.gov/Media/Y2022/PSA220208 [1] https://www.identitytheft.gov/#/Know-Your-Rights https://www.identitytheft.gov/#/Know-Your-Rights
    - joshmanders 4y ago
      > You're just upset that I'd have the gall to suggest that you use online banking No I just think you're so far up your own ass that you fail to realize that 2FA TOTP on your email doesn't make you more secure. But whatever, you do you homie.
      - latchkey 4y ago
        > you fail to realize that 2FA TOTP on your email doesn't make you more secure. More secure than what?

latchkey 4y ago

I'd argue that even without 2FA on email, it is still less risk than simjacking.

joshmanders 4y ago
I think you over estimate how hard it is to simjack vs bruteforcing a simple password to email.
- latchkey 4y ago
  Disagree [0]. Name one major email provider that doesn't have bruteforce protection. This is a silly circular argument anyway. You're just upset that I'd have the gall to suggest that you use online banking to someone who lives in a rural town in Iowa. Instead, you keep pontificating on the level of security between email and sms... while at the same time, being perfectly ok with using a bank that only offers sms 2fa. Facepalm. At the end of the day, neither matter... your funds get stolen from simjacking because a bank only offers that as protection? Read this [1]... max loss is $500 and more likely $0. This is bike shedding a moot issue. 2fa is more relevant for other issues. Have a nice day, sir. [0] https://www.ic3.gov/Media/Y2022/PSA220208 https://www.ic3.gov/Media/Y2022/PSA220208 [1] https://www.identitytheft.gov/#/Know-Your-Rights https://www.identitytheft.gov/#/Know-Your-Rights
  - joshmanders 4y ago
    > You're just upset that I'd have the gall to suggest that you use online banking No I just think you're so far up your own ass that you fail to realize that 2FA TOTP on your email doesn't make you more secure. But whatever, you do you homie.
    - latchkey 4y ago
      > you fail to realize that 2FA TOTP on your email doesn't make you more secure. More secure than what?