Captcha to logout?

2 pointsjzombie2 comments

My bank makes me confirm if I am a robot when logging out (though login is w/ 2FA).

Does putting a captcha on logout make any sense at all?

Not at all. I bet no one thought through that requirement. Does it have an automatic logout after n minutes of inactivity? Does it ask if you're a robot then?

Also: 2FA doesn't mean you aren't a robot. They can have TOTPs and SMS, too.

I haven't noticed it asking for the captcha yet on automatic logout, but I'd imagine it would be there all the same if I had to guess.

Reply on news.ycombinator.com