Hacker News Reader

> With phone 2FA all that needs to happen is you have your phone and wallet stolen.

Are device passcode and app biometrics insufficient security measures in the event of device theft?

If they have your device pin code and your device, they have control of your entire digital life.

We’ve never been more vulnerable to petty crime.

If you have your phone set to wake-up/show notifications on new messages, and your bank simply sends an SMS code as verification, then the thief can just read the message(s) when they come in and input them.

You have the option to hide the actual message, at least on Android.

Last I checked this was opt-in on Android; it's been default on iOS since I think 2017ish?

Reply on news.ycombinator.com