Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I am not sure to understand your comment about the bookkeeper fraud.

If you have a way to receive/generate (SMS or App or Token) the Pin, you can clean out the account just fine, how does this change?

From what I understand the 2FA Pin purpose is that the bank wants to make sure that I am actually the person that can authorize the payment, and asks for this confirmation immediately before processing the payment(s).

I could understand if there were some limits (I think there are but they are way higher than any payment I ever made), but I cannot see why I need 3 Pins to make 3 payments of 100 Euro each (let's say water, gas, electricity) when the same Pin is good for a single - say - 10,000 Euro payment.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: