This message was self-deleted by its author

[LuckyCharms]

2. You know that two factor authorization via text?

I sign into my credit union every morning, and the number that they text to me for verification is 8 digits.

Every other site that I sign into uses 6 digits. Fidelity, for example...which has a lot more security exposure than my local credit union. Fidelity only uses 6 digits.

It's a little bit of a pain in the ass having to type in 8 digits, because I always screw it up.

But I find it fascinating from a system design perspective. I'm not really complaining about it, I just find it interesting.

I designed a few bid systems when I was working. I was focused on designing the user interface...the goal was to make it idiot proof.

So I question...why 8 digits for a local credit union, instead of 6?

After all, a hacker would have only 10 minutes to hack that text and get the code...isn't 6 digits enough to prevent that? Unless they are thinking that someone is standing behind you, breathing down your neck, trying to read the code, and 8 digits would make it harder to do that? I don't know...