gtkspert

You have to think of a Bank's threat model though.

Account compromise is one threat, but the use of valid accounts for money laundering is another. In my view the reason they "get it wrong" is because they don't want you to be able to automate transactions, as that makes money laundering easier...

Therefore, they don't want to use standard TOTP because that's easy to automate. Requiring SMS based 2FA is harder (but not impossible, use a modem or maybe a SMS service.) And requiring a special app is quite difficult to automate.

Is there a way off Authy yet?

I've resorted to writing a service that can initiate transfers and retrieve transactions for a smaller US bank.

I really just want a bank account with an API, that would be so, so nice.

I marked my card as damaged, and when it was replaced I refused to give them the new details...

Also, to be clear, by “we” they really mean “a contributor”

Where do you get your cheap 4G/LTE?

Best I can find is prohibitively expensive, especially if I wan't to stream 4K content...

This looks awesome

FTFY: "How I hacked my own iCloud account for $400 using my password."