Re: 2-Factor Authorization Methods

On Thu, 3 Jun 2021 19:13:39 -0000 (UTC), William Unruh
<[email protected]> wrote:

>...
>>>
>>>I think he is comparing two separate 2-factor methods. On is Symantec's
>>>and one is where the other end sends you a text message that you have to
>>>respond to.
>>>
>>>I am not sure, but that is how I read his sentence (It is sufficiently
>>>vague that it could mean anything)..
>>>So, as I read it,  it is not a comparison of a one (or zero)  factor vs two factor but different
>>>2factor methods.
>>>
>>
>> I'm no tech nor security expert.  What I thought he was asking was two
>> step authentication really needed over "plain vanilla SMS text
>> message".
>>
>> Now that I read it again, I see he is already using 2 step stuff, but
>> asking for info comparing two different methods.
>>
>> I think he better do as his "financial institution" wishes.
>>
>
>I think he has no choice, without changing banks. But in comparing the
>two, he really needs to give us more information. The current procedure
>is completely undefined. It may be that that they used to use the sms
>version, and they are now forcing him to use the app instead "because it
>is more secure". That claim is pretty hard to verify, since the app is
>almost certainly proprietary and secret. Many claimed methods are, I
>suspect, actually very weak.

My wife signed up with our bank and credit card holder for really
great idea. Every transaction made on our bank or credit card account
is sent via e-mail right after being made. Crooked nonsense can be
nipped in the bud immediately.  I don't think there is a security
method around that some hackers or other cannot - will not break.  

What it boils down to is the account holder cannot live in denial or
ignorance of the facts regarding the destructive ways of hackers. The
real and final responsibility lies with the account holder.  Like it
or not - time consuming or not - pay attention daily - or like my wife
does, check hourly.  :o)