281–290 of 382 posts
This has been the vector for Twitter hacks for many years. Get the 2nd factor
SMS is the 2nd factor. Actually it's worse than just a 2nd factor because a compromised phone number can usually be used for password recovery
The problem is one factor account recovery, because it means you have one factor auth.
I am surprised no one here mentioned mooltipass https://www.themooltipass.com/
Can anyone recommend a US based bank (or a bank that accepts US customers) that 1) has either a 2FA token for phone e.g. with Google Authenticator, a hardware token, or some kind of other token based factor; and 2) has strong security when calling? I generally don't need a physical presence. My current two banks don't have direct 2FA enabled. As far as I remember, the questions available to one of my banks (credit un…
See: https://www.jpmorgan.com/tss/General/Improved_Security_and_1...
Earlier quoted context omitted.
Sadly, USAA is only open to military service members and their kids. That would be my choice if I could use it.
Not true. They offer insurance only to military families. Banking is open to anyone. EDIT: This is no longer true as of 2013.
https://www.usaa.com/join/start/?productId=bank-checking-cla...
Can anyone recommend a US based bank (or a bank that accepts US customers) that 1) has either a 2FA token for phone e.g. with Google Authenticator, a hardware token, or some kind of other token based factor; and 2) has strong security when calling? I generally don't need a physical presence. My current two banks don't have direct 2FA enabled. As far as I remember, the questions available to one of my banks (credit un…
Chase has 2FA with a token. See: https://www.jpmorgan.com/tss/General/Improved_Security_and_1...
A few weeks ago I was vacationing in Big Bend National Park, which is in a remote corner of Texas. When trying to pay for our breakfast, my credit card was declined. On the phone with them, they said the card had been flagged as being used in fraud because we were off in the middle of nowhere, away from our normal spending patterns. The ONLY way to reactivate the card is for the CC company to SMS text us with a code,…
Then one time to me it happened when I was exhausted after a very long flight, trying to check into a hotel. I got on the phone with them, sternly told them the history of events and the situation, and demanded to be compensated for the time and hassle otherwise I would switch banks. I pointed out their bank was misnamed "Worldwide Service". They put £100 in my account, and the problem seemed to go away after that point (I still needed to inform them ahead of time, but that did the trick).
Earlier quoted context omitted.
> Yeah, Identity theft is one of those crimes where the authorities don't really care. There is no such thing as "identity theft". You can't steal who someone is, that's bullshit. It's rather some party not making sure it's actually you they are talking to, and then claiming that you are responsible for it anyway because they fell for someone else's scam.
And piracy is an act of robbery on the high seas. When the name sticks, there's usually nothing we can do. Sad but true.