Re: 2-Factor Authorization Methods

On Thu, 3 Jun 2021 17:24:33 -0000 (UTC), William Unruh
<[email protected]> wrote:

>On 2021-06-03, [email protected] <[email protected]> wrote:
>> On Thu, 3 Jun 2021 19:03:42 +0800 (GMT+08:00), user <[email protected]>
>> wrote:
>>
>>>Wade Garrett <[email protected]> Wrote in message:r
>>>> My financial institution wants me to use Symantec's VIP Access rather than plain vanilla SMS text messages for 2-factor authorization to access my account online. They say Symantec's system is stronger.Yes? No?
>>>
>>>Yes
>>
>> You have no choice.  Plain text messaging is highly insecure. Two step
>> authentication makes hacker work harder. In money matters, you dang
>> well better protect your account with 2 step. Encryption would be
>> better, but your outfit didn't offer you that choice.
>
>I think he is comparing two separate 2-factor methods. On is Symantec's
>and one is where the other end sends you a text message that you have to
>respond to.
>
>I am not sure, but that is how I read his sentence (It is sufficiently
>vague that it could mean anything)..
>So, as I read it,  it is not a comparison of a one (or zero)  factor vs two factor but different
>2factor methods.
>

I'm no tech nor security expert.  What I thought he was asking was two
step authentication really needed over "plain vanilla SMS text
message".

Now that I read it again, I see he is already using 2 step stuff, but
asking for info comparing two different methods.

I think he better do as his "financial institution" wishes.

>> Here is some more info at this site:
>> https://blog.malwarebytes.com/101/2018/09/two-factor-authentication-2fa-secure-seems/
>>
>> Here is the link to the search I did on 2 step security. There are
>> more pages with more info here.
>> https://duckduckgo.com/?q=2+step+verification+secure%3F&t=h_&ia=web
>>
>>