4 ms·
Systems that are based on one-time codes instead of permanent credentials are really under-appreciated in the anglosphere. Giving your credit card to your chil
by miki123211 3mo ago
Systems that are based on one-time codes instead of permanent credentials are really under-appreciated in the anglosphere.
Giving your credit card to your child / friend / spouse / subordinate, so that they can buy something with your money, is a lot more risky than giving them an OTP, valid for a single transaction, which you have to approve in your app anyway.
Poland's Blik is based on 6-digit codes, which makes this feature even more useful, as you can E.G. dictate that code over the phone to a trusted acquaintance at the ATM.
- jingpostmedia 3mo ago[flagged]
- navigate8310 3mo agoBecause those OTPs can be intercepted by any MITM unless you are using on-device 2FA generated by an app.
- xk3 3mo ago> intercepted by any MITM Most things are... even SSH is Trust-on-First-Use. You can really only verify out of band. OTP is quite a bit better than CC or bank account numbers... assuming the OTP is only restricting use (and not giving access to view or modify other account information, etc)