644
Feds Warn SMS Authentication Is Unsafe After ‘Worst Hack in Our Nation’s History’ (gizmodo.com)
submitted 2 years ago by to c/technology@lemmy.world
158 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 2 years ago (14 children)

This is the main reason I switched to Fidelity here in the US. It's a brokerage, but it does basic bank things, like checks, debit card, etc, and they support SymantecVIP, which works w/o Google Play Services. TOTP support really isn't that hard, I don't understand why banks are so slow in adopting it...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 14 child comments
    •
  • [–] 11 points 2 years ago (1 child)

    The issue is, banks are only going to do what they're required to do by law. The government is run by dinosaurs who don't know what computers are, let alone what TOTP is.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 2 years ago* (3 children)

    Thanks for this...I might be opening a Fidelity account....

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 4 points 2 years ago (1 child)

    They're fantastic. :)

    The only negative stories I've heard are from people who really push the boundaries, like people day trading and whatnot. If you're a regular user looking for a bank alternative, you should be good.

    Just know their branches don't really have any banking services, so you can't go there to withdraw or deposit cash, get a cashier's check, etc. I keep an account w/ a local institution and transfer money as needed for banking services.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 2 years ago*

    I had a negative experience when initially setting up my account, because of TikTok. This group of kids who called themselves "Fidelity Boyz" discovered that you could deposit a fake check and immediately withdraw the money.

    So many people did this that they had to severely lock things down. For most customers, money transferred in either via check or via ACH pull (telling Fidelity to take the money from an account at another bank), was subject to a 16 business day (three weeks and one day) hold. Direct deposits (e.g. paychecks) were not affected, and ACH pushes (when you tell another bank to send the money to Fidelity) were eventually fine too.

    It was a big pain. The money I transferred was in limbo for a long time, after I had already switched all my auto-pays over to Fidelity, so I had to switch them all back until the money cleared.

    Now that that's over, it's great. I love that they reimburse ATM fees worldwide, and I'm a big fan of their basket portfolios product since it makes it so easy to rebalance a portfolio. Saves me from having to manually do a bunch of calculations, and I love that it has a fixed monthly price instead of being percentage based like roboadvisors.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 2 years ago (2 children)

    In case you weren't aware, Symantec VIP is just TOTP-OATH in a fancy coat. You can extract the secret and use it with any TOTP app. I use Authenticator Pro (now called Stratum) because it's open-source and has a watch app.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (4 children)

    Now you've got me wondering about this for Canada. Would be a pita to move mortgage and investments, but there must be a better way than the big banks.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 2 years ago (3 children)

    Here's a website that tracks this kind of thing. No guarantees about being up-to-date, but from a surface-level check, it looks like you have options.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •