Hacker News new | ask | show | jobs
by astrange 1262 days ago
What operations does it require the OTPs for? Generally anyone can do an ACH withdrawal from your account and the bank won’t ask you about it until afterwards. This is dealt with by other legal frameworks but you could certainly call it insecure even if they need 4 factors to let you see your account balance.
1 comments

Just logging in.