Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Why not require a separate PIN code for certain transactions, like wire transfers? That wouldn't help against a keylogger, but it would help if the account was compromised in this way.


The 2-factor approach my bank takes (bit of detail at http://news.ycombinator.com/item?id=2634730), is what I consider a decent security/usability tradeoff.

When your phone has a NFC reader and your bank smartcard can talk to each other to handle it, even better. (Well, higher risk of intrusion because it's a multipurpose device, but way ahead in terms of usability)




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: