Path: news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: Chris <ithinkiam@gmail.com>
Newsgroups: uk.telecom.mobile,comp.mobile.android
Subject: =?UTF-8?Q?Re:=20"'Scammers=20stole=20=C2=A340k=20after?=
 =?UTF-8?Q?=20EDF=20gave=20out=20my=20number"?=
Date: Mon, 3 Mar 2025 21:38:01 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 32
Message-ID: <vq57fp$1g6j2$1@dont-email.me>
References: <vq478a$1a6p9$1@dont-email.me>
 <m2m70fF4cnfU1@mid.individual.net>
 <vq4ue1$1ejeg$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 03 Mar 2025 22:38:02 +0100 (CET)
Injection-Info: dont-email.me; posting-host="6ce35a1a8d82c30462909f4b5d2c747e";
	logging-data="1579618"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX18eN/4HBoh/+NtLhVO4KLY3eMhErLkqhF8="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:YbKXENPYC403sUOwWo4yFajF1T0=
	sha1:XhGqBujXWvbw6S0o0+y1SWQakEs=

Newyana2 <newyana@invalid.nospam> wrote:
> .
> 
>   So the weak point here, which was supposed to be the strong point,
> is 2FA. 

Eh?

> The secondary weak point is people having online accounts in
> the first place. If you're banking online then you're vulnerable. But it's
> not easy to avoid. I had to call my bank's corporate offices in order
> to block the possibility of creating an online account. For most people
> that's out of the question. People want convenience. Walk to the bank?
> Fuggetaboutit!

What bank? In the uk most banks are closing branches all over the place.
Plus, we have online only banks. My nearest branch for one of my banks that
does have branches is nearly 6 miles away. 

Also having to physically tell a person to move digital numbers from one
place to another is an utter waste of everyone's time. 

>   Ironically, unless someone can hack into my computer they have
> virtually zero chance of taking over my accounts. First, I don't have
> online accounts, generally. Second, since I don't use 2FA an attacker
> would have to somehow get my email passwords.

How does that work? 2FA requires a code *and* the password. You're removing
a layer of security.