IT 👏 IS 👏 OBJECTIVELY 👏 A 👏 DOWNGRADE 👏 IN 👏 USABILITY 👏 IF 👏 I 👏 HAVE 👏 TO 👏 GET 👏 MY 👏 PHONE 👏 OUT 👏 FOR 👏 USING 👏 A 👏 FEATURE 👏 OF 👏 A 👏 WEBSITE 👏
IT 👏 IS 👏 OBJECTIVELY 👏 A 👏 DOWNGRADE 👏 IN 👏 USABILITY 👏 IF 👏 I 👏 HAVE 👏 TO 👏 GET 👏 MY 👏 PHONE 👏 OUT 👏 FOR 👏 USING 👏 A 👏 FEATURE 👏 OF 👏 A 👏 WEBSITE 👏
Don’t blame the banks for implementing security (Well SMS is the barely minimal bar for 2FA, but every other option is going to be some form of needing a secondary device of some kind)
Blame the bad hackers/scammers out there ruining everything
I blame the banks for creating security vulnerabilities in SMS instead of forcing their users to use a proper TOTP system.
This…
I’m not blaming them for security, I blame them for rushing security and implementing piss poor security to meet the bare minimum standard.
It took my bank years to even acknowledge that upper and lower case in a password could be a thing, let alone implement the proper fix