Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

How so? It means you need access to the online account, to the 2FA device, and to both letters to abuse the card.

If the attacker already has access to the online banking account, then he/she can do much worse things anyway.



Different axis aka not security. The security is much better. But it's slow and inconvenient.


I opened an account at Metro Bank (in London), in a branch. They verified my id, then printed a debit card — this took about 10 minutes — and let me set its initial PIN in the bank.

I don't know if this is now normal in the UK. The previous time I opened an account in-branch was 2004, when the chip card arrived by post a few days later, with the PIN in a separate letter.


Similar situation here in Germany – but some banks, as I mentioned, require you to verify online that you received the letters, if you enabled this security feature.

In fact, I’ll go next friday to the bank to get a new debit card, as my existing one stopped working a few months ago.


Metro Bank are a newcomer to the market who've focused heavily on streamlining their customer enrolment because of that. I don't think other banks offer this.


How is it inconvenient? It’s not like you get a new card every day.

And it only delays the process by 2 days. At maximum.


Rare inconvenience may be more easily tolerated, but it is no less inconvenient.

The fact that you can even say "well it's only 2 days delay" seems insane to me.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: