3 ms·
More likely examples are hacking into sites that don't use two factor auth, like your domain registrar or web mail accounts. If you are using any form of onlin
by jhancock 18y ago
More likely examples are hacking into sites that don't use two factor auth, like your domain registrar or web mail accounts.
If you are using any form of online banking without two factor auth, find another bank!!! Even paypal offers a security token these days.
- mattmaroon 18y agoHow exactly would they do that?
- khafra 18y agoIs your question "how exactly would the site usage monitoring hacker steal your bank account?" or "how would a bank use two-factor authentication over the internet?" For the former, if we assume a malicious website administrator collecting usage details, he'll use the email address and other information revealed during the sign-up to spear-phish the unwary user with malware targeted at their particular bank. Such malware is available at any wretched hive of scum and villainy at reasonable prices. If your question's the latter, solutions include a battery-powered token that produces different numbers at 60 second intervals, a temporary PIN sent by SMS to a registered phone, and others.
- mattmaroon 18y agoIt was the first. I missed the original part where the commenter you were replying to was assuming your site has a login and people use the same password there that they do with their email or bank accounts. Wouldn't it be much easier to simply suggest people have different passwords for their banks, rather than having devices for each one? The SMS thing is cool though, PayPal does that now I think.