Path: ...!2.eu.feeder.erje.net!feeder.erje.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Dave Royal <dave@dave123royal.com>
Newsgroups: comp.mobile.android
Subject: Re: Codes sent by text message
Date: Tue, 12 Mar 2024 09:48:49 +0000 (GMT)
Organization: news.eternal-september.org
Lines: 31
Message-ID: <usp8e3$7g77$1@dont-email.me>
References: <ush35k$2791b$1@dont-email.me> <usid1f$2fqif$1@dont-email.me> <usn5ia$3lqer$1@dont-email.me> <1mtd3l3os6odg.dlg@v.nguard.lh> <usnm5e.7g4.1@ID-201911.user.individual.net> <usp2um$6ate$1@dont-email.me> <usp9g2.f1k.1@ID-201911.user.individual.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Injection-Date: Tue, 12 Mar 2024 09:48:51 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="ec5f915a3258ab52dedd3e4e822d6e0f";
	logging-data="245991"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX182iOT0UslQJ+UA2sfyuRIX"
Cancel-Lock: sha1:zIz+xBaYq8Mjk+2GcDJ5D3Y6g+Q=
X-Newsreader: Mod.PiaoHong.Usenet.Client:2.02.M16
Bytes: 2572

Frank Slootweg <this@ddress.is.invalid> Wrote in message:

> Chris <ithinkiam@gmail.com> wrote:
>> Frank Slootweg <this@ddress.is.invalid> wrote:
>> > VanguardLH <V@nguard.lh> wrote:
> [...]
>> >   As Dave Royal also mentioned, your bank probably mentions/'supports'
>> > one or more TOTP 'apps'/programs, but - assuming they have not
>> > re-invented the wheel - their systems should be standards-compliant and
>> > hence worke with any standards-compliant 'app'/program.
>> 
>> Sadly in the UK that's not the case. They either use SMS, an automated call
>> or their own TOTP available in their app. 
> 
>   It's similar in The Netherlands, at least for my banks and other banks
> I know of. But SMS and automated call are (AFAIK) not used. Just a
> bank-specific hardware TOTP device (uses your bank card as one of the
> factors) or TOTP in their apps. I use the TOTP devices, because it's not
> much of a bother and more secure.

Does this bank-specific TOTP device use your normal bank
 credit/debit card (i.e. the one you you make payments or withdraw
 cash with) or a specific TOTP card. I have one of the latter -
 though the bank doesn't use it for payments requiring
 2FA.

Amex has recently taken to asking for 2 digits of my credit card
 PIN to authorise some transactions - after years of saying we
 should never reveal it.
-- 
Remove numerics from my email address.