this post was submitted on 20 Dec 2024
92 points (100.0% liked)

Cybersecurity

23 readers
8 users here now

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Rules

Community Rules

founded 2 years ago
MODERATORS
[email protected]
[email protected]
92
So, why do almost all banks, in the U.S. at least, only support the worst 2FA authentication method exclusively? And, this article doesn't mention SIM-swap attacks, which are unavoidable. It can't be (hear-me.social)
submitted 2 days ago by [email protected] to c/[email protected]
19 comments fedilink hide all child comments
 

So, why do almost all banks, in the U.S. at least, only support the worst 2FA authentication method exclusively? And, this article doesn't mention SIM-swap attacks, which are unavoidable. It can't be that difficult to support an authenticator app.

https://gizmodo.com/feds-warn-sms-authentication-is-unsafe-after-worst-hack-in-our-nations-history-2000541129

#Cybersecurity

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 20 points 2 days ago (1 children)

I've filed about 7 complaints to the Ombudsman where I live for my bank. I refuse to use sms for verification. I blame the bank for limiting my access to my accounts as a result. I've spoken to hundreds of employees, for hours and hours, wasted in branch time for hours, spoken with managers, escalated numerous tickets.

I've probably wasted more of their time and money, then it would have been for them to just implement 2fa from an app rather than sms..

I've proven to them how insecure it is. Employees and managers tell me I'm paranoid for nothing.

I'm so sick of this fight with them. Literally have no idea what else to do other then constantly complain, open tickets hourly and literally waste their time, ruin their metrics and annoy the hell out of anyone that works at the bank. I won't use sms for 2fa.

[–] [email protected] 3 points 2 days ago (1 children)

You are my hero.

[–] [email protected] 2 points 1 day ago

Literally got a call today from the ombudsman and had to explain it to them. It was like talking to politicians about the internet.

I'm hoping they can at least implement something better then sms.