Re: 2-Factor Authorization Methods
William Unruh <[email protected]> Thu, 3 Jun 2021 19:13:39 -0000 (UTC)
| Newsgroups | alt.computer.security |
|---|---|
| Organization | A noiseless patient Spider |
| Message-ID | <[email protected]> |
... >> >>I think he is comparing two separate 2-factor methods. On is Symantec's >>and one is where the other end sends you a text message that you have to >>respond to. >> >>I am not sure, but that is how I read his sentence (It is sufficiently >>vague that it could mean anything).. >>So, as I read it, it is not a comparison of a one (or zero) factor vs two factor but different >>2factor methods. >> > > I'm no tech nor security expert. What I thought he was asking was two > step authentication really needed over "plain vanilla SMS text > message". > > Now that I read it again, I see he is already using 2 step stuff, but > asking for info comparing two different methods. > > I think he better do as his "financial institution" wishes. > I think he has no choice, without changing banks. But in comparing the two, he really needs to give us more information. The current procedure is completely undefined. It may be that that they used to use the sms version, and they are now forcing him to use the app instead "because it is more secure". That claim is pretty hard to verify, since the app is almost certainly proprietary and secret. Many claimed methods are, I suspect, actually very weak.