588
submitted 1 month ago* (last edited 1 month ago) by sorter_plainview@lemmy.today to c/programmer_humor@programming.dev

Edit: @Successful_Try543@feddit.org solved it. It says "one special character". Not "at least one".

you are viewing a single comment's thread
view the rest of the comments
[-] kirk781@discuss.tchncs.de 8 points 1 month ago

Some internet banking sites give access after only asking for login password. They will only ask for transaction password and OTP (that will only come on phone) later on. Asking for two passwords isn't necessarily more secure since many people will just reuse their original one again. And OTP instead of offering something like hardware security key is insane.

[-] IsoKiero@sopuli.xyz 5 points 1 month ago

My bank uses 6 digit 'customer number' (which is set by the bank) and that's verified with an app and a personal PIN (app shows 'login attempt ABCD at mm.dd. hh:mm' where ABCD is shown on login page too) or via SMS OTP (again with 'ABCD' verification). And again with personal pin + app or OTP to confirm transactions. The app itself can be protected with a fingerprint or phone pin and every new installation needs to be registered to the system, so I can't just use my phone app to access my wifes account (or anyone elses) but I still can map multiple accounts (like corporate ones) to the same installation.

I think that's pretty reasonable approach.

[-] Appoxo@lemmy.dbzer0.com 3 points 1 month ago

Reason why I took a hardware tan generator versus using the OTP function of one of their other apps.
Thanks but no, I will use the old crusty method as I know how easy that's hacked.

this post was submitted on 09 Sep 2024
588 points (99.5% liked)

Programmer Humor

19331 readers
37 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 1 year ago
MODERATORS