• hessenjunge@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    49
    arrow-down
    2
    ·
    3 days ago

    I don’t know about the US but on this side of the pond banks have their own 2nd factor apps. So to log in to a bank’s website you need an app - quite probably with play integrity.

    • pinball_wizard@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      22 hours ago

      Dang. Y’all need to pick better credit unions. MFA rolling token is an open standard. Any single app can support all of my (correctly implemented) tokens. I prefer Aegis, but they (correctly implemented MFA apps) all work.

      I don’t want to trust my money to someone who can’t implement standards compliant MFA.

      That would scare the daylights out of me.

    • AmbiguousProps@lemmy.today
      link
      fedilink
      English
      arrow-up
      15
      ·
      edit-2
      3 days ago

      That’s insane, I have never heard of such a thing, but I’m in the US where most banks don’t even have non-sms second factor.

    • miss phant@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      5
      ·
      3 days ago

      I’ve been using a dedicated TAN generator for banking since I first made my account but I don’t doubt that’s going away at some point, since debit cards from the same bank already require an app for 3-D secure.

    • eleitl@lemmy.zip
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      3 days ago

      No, hardware TAN generator work fine. If the bank wants to force me to use proprietary snake oil it’s time for a new bank. Or using a dedicated old smartphone just for the app.