Re: 2-Factor Authorization Methods

William Unruh <[email protected]> Thu, 3 Jun 2021 17:24:33 -0000 (UTC)
Newsgroups alt.computer.security
Organization A noiseless patient Spider
Message-ID <[email protected]>
On 2021-06-03, [email protected] <[email protected]> wrote:
> On Thu, 3 Jun 2021 19:03:42 +0800 (GMT+08:00), user <[email protected]>
> wrote:
>
>>Wade Garrett <[email protected]> Wrote in message:r
>>> My financial institution wants me to use Symantec's VIP Access rather than plain vanilla SMS text messages for 2-factor authorization to access my account online. They say Symantec's system is stronger.Yes? No?
>>
>>Yes
>
> You have no choice.  Plain text messaging is highly insecure. Two step
> authentication makes hacker work harder. In money matters, you dang
> well better protect your account with 2 step. Encryption would be
> better, but your outfit didn't offer you that choice.

I think he is comparing two separate 2-factor methods. On is Symantec's
and one is where the other end sends you a text message that you have to
respond to.

I am not sure, but that is how I read his sentence (It is sufficiently
vague that it could mean anything)..
So, as I read it,  it is not a comparison of a one (or zero)  factor vs two factor but different
2factor methods.

>
> Here is some more info at this site:
> https://blog.malwarebytes.com/101/2018/09/two-factor-authentication-2fa-secure-seems/
>
> Here is the link to the search I did on 2 step security. There are
> more pages with more info here.
> https://duckduckgo.com/?q=2+step+verification+secure%3F&t=h_&ia=web
>
>