How I reverse engineered my bank's security token
While I don't know about the situation elsewhere in the world, here in Germany most banks retired the single use codes (called TANS or (if indexed) iTans) quite some years ago for being insecure.<p>Most online banking will now require a code created per transaction that is 1. either send to you via text on your mobile phone (and is thus prone to phone malware) or 2. is generated using an external device and the chip on your banking card[1] (a true two factor authentication). Both system will show you the exact details (target account, amount to be send) before confirming the transaction. A virus on the computer is not sufficient to hijack your account.<p>Just out of curiosity: What security measures do your banks employ and do they allow you to upgrade to a higher security level?<p>[1]<a href="https://www.ksklb.de/privatkunden/banking/chiptan/chiptan_faq/FAQ-TAN-Generator.jpg" rel="nofollow">https://www.ksklb.de/privatkunden/banking/chiptan/chiptan_fa...</a>