Hacker News new | ask | show | jobs
by Paul_D_Santana 4509 days ago
I love ING Direct.

I just wish they offered Two-Factor authentication for "360" accounts.

Relevant link: https://www.facebook.com/CapitalOne360/posts/101515573342295...

2 comments

Honestly, it would be great if they had passwords instead of just a maximum 6-digit number (!!!) for auth. It's fucking absurd.
>It's fucking absurd.

On an unregistered browser, someone has to guess the answer to two security questions and the PIN. Did it occur to you that maybe it's not a problem since it's been that way for at least 8 years now (I signed up in 06)?

Yes 8 years ago poor security was a bit less of a risk.
Do other internet-only banks offer such a feature? I'm pretty done with "360".
In the UK it's common to use card readers which can use the chips in our cards to generate a response to challenges from online banking.

It also allows you to only authorise specific actions e.g. transferring a specific amount to a specific payee, so protects against replay attacks.

Same. Ever since they ticked under the 1% interest rate, I've been looking for a better alternative (ah I loved the 6% back with ING in '05).
Surely the interest rate has more to do with the Fed than the bank?