3 ms·
When I sign on to a bank it sends an SMS. Then my phone prompts me to share that code with the brower, on my desktop. It's a neat QOL "feature" - but kinda fee
by edoceo 2y ago
When I sign on to a bank it sends an SMS. Then my phone prompts me to share that code with the brower, on my desktop. It's a neat QOL "feature" - but kinda feels too automated to be secure.
- lupire 2y agoThat's because the server recognizes both clients, and you are prompted to approve the other client from the client that has the code. You are giving permission to the remote client, not taking permission from the remote client.
- edoceo 2y agoThe server recognized my device from the messenger/SMS app? That seems not correct. But somehow, the desktop browser and my mobile are tied together for this app. But no other sites have this magic.
- happyopossum 2y agoIf you have an iPhone and a mac, most sites that use SMS OTPs work this way
- edoceo 2y agoLinux desktop, android phone.