[mrguyorama]

Is an ATM card and PIN not two factors?

[moftz]

I can wire my entire bank account away without any 2FA with online banking. My bank just started doing SMS verification for new devices but that's still not really enough. Like just get on the TOPT train and leave it alone.

[mrguyorama]

I believe some banks have 2FA. My bank's app will require me to setup SMS verification by October. A little late, but better than never I guess

[blattimwind]

Not even a TAN?

[angry_octet]

I think you need to change banks.

[chenning]

Yes. I didn't really consider that. I was thinking more along the lines of an expiring token. If you had to punch it in, someone who came around and Thermanator'd it would always be too late.