Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You will find there is often a big difference between logging into the account and making any change or transaction. Getting the password right might give you account details and some basic transaction history, but it won't allow you to transfer money without 2FA.


True, but you assume 2FA is implemented correctly and doesn’t have a bypass. What I’m saying is that they’re often poor at what they do, so I don’t put excessive trust in them.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: