Introducing two-step verification | Hubert Financial | Discussion forum

krwilson said

"Two-step verification is now available for all Hubert members. This feature gives you an extra layer of security when accessing your Hubert account online through Hubert GO (app) and Hubert GO Web (desktop). If you plan to enable two-step verification through the app, please ensure it is updated before starting as this feature is only available with the most recent version of the app."

I just set it up and all is good. It also allows you to choose "remember this device" after setup and unlike Motive it actually works!

Hope all banking follows suit. (scotiabank has since the end of June)  

That ⬆ third sentence is 'Very Important' ... Trust me ❗

LOL

Dean

I had a similar experience recently. I decided to use the secret question route instead of my phone. Of course it didn't work. I needed to capitalize a letter when, normally, I use lowercase.

I don't know why they don't offer google authenticator or authy. Using these on a separate device offers great security.

Loonie said
I've been having a lot of trouble with the second step for the verification.
I have tried the secret question and the secret number email. I don't have a texting set-up. .......  

The "secret question" component in two step verification is usually set up, in fact, to be a secondary password, that is, it must be entered precisely to match the original entry. Case sensitive and spelling accuracy. john and John and Jon are not the same.

Furthermore as identity theft is always a threat, it's best to use answers that do not reflect reality, so your father's middle name could be Zorro or Superman but not his real name.

This information should be stored in your password manager, preferably some kind of secure, password protected digital password manager, so you can copy / paste your responses, for absolute accuracy.

A negative comment on Hubert's two step verification is that their telephone verification will only text a response rather than including an option for a voice response. Some people still have landlines that do not support text or choose not to use text.

That being said, I have not had a problem with the "secret question" with Hubert, as I use the strategies I have described.

Happy New Year!

Stephen

Part of Hubert's two step verification I find laughable. I choose to use a secret question, to which I am supposed to put in the correct answer. But when I click where I am supposed to enter the answer, a drop down menu appears on my browser (Opera) with all three answers for each question! Just need to choose the right one, which is obvious from the context of the question. No other FI that I use which asks secret questions gives you a choice of answers!

I pointed this out to Hubert staff some months back, but they did not seem alarmed.

Norman1 said

rhvic said
… But when I click where I am supposed to enter the answer, a drop down menu appears on my browser (Opera) with all three answers for each question! Just need to choose the right one, which is obvious from the context of the question. No other FI that I use which asks secret questions gives you a choice of answers!

I think it is your browser that has cached the answers to your questions.

There is no drop down menu for me to select an answer. I have to type in the answer to the question. I configured my browser to not remember passwords or answers to questions.  

If this is an issue with the Opera browser, then it is only doing it for Hubert - about 5 other FIs I use do not offer me a list of answers to choose from.

Dean said

rhvic said

Part of Hubert's two step verification I find laughable. I choose to use a secret question, to which I am supposed to put in the correct answer. But when I click where I am supposed to enter the answer, a drop down menu appears on my browser (Opera) with all three answers for each question! Just need to choose the right one, which is obvious from the context of the question. . . .

The Exact same thing ⬆ is happening to me ❗

My browser is 'Google Chrome'. I'll have to somehow figure out how to stop this from happening, but I have no idea how its done.

Anyone have suggestions ❓

Thanks,

Dean

  

Well, though I'm not the sharpest tool in the shed ... I've already figured
this out ❗

Turns out, all I had to do is disable the Autofill for Addresses in my Google Chrome browser.

All's Well That Ends Well,

Dean

Dean said

Well, though I'm not the sharpest tool in the shed ... I've already figured this out ❗

Turns out, all I had to do is disable the Autofill for Addresses in my Google Chrome browser.

All's Well That Ends Well,

Dean

  

smayer97 said

It is STILL a Hubert programming problem... developers can block what data a browser can cache, and most FIs block any security related data from being cached.  

Actually, you're Right ⬆ ... the Hubert/Sunova programing developers should be blocking the browser cache.

And I have quickly realised that my Bandaid Remedy of disabling the Autofill for Chrome, is a Real Pain in the A$$. All my Autofill is now disabled ... even the legit ones.

Hubert/Sunova is Failing us Again ❗

Not happy about this

Dean

Thanks Dean. I was one of the earlier callers to them about this, when they first introduced this method. Let's see if they change anything.

Dean said

I just got off the phone with a Hubert CSR . . .

I explained the problem/concern to her about Hubert's 2 Factor Authentication (2FA) (a.k.a. Two-Step Verification) sign-in process, not blocking people's Autofill Browser Cache.

At first she quickly said I could easily solve this problem, by turning off the Autofill function on my computer (implies that I wasn't the first person to call about this). But when I told her that I didn't want to do that, and that Hubert is the only FI that allows Autofill to work on their 2FA, she quickly backtracked.

I went on to say that this is potentially a rather serious security problem, and that Hubert's website programers should fix this as soon as possible. She agreed, and said she would refer this matter to their IT Dept.

Call me a sceptic, but I'm guessing little to nothing will really be done about this, until a lot of people complain to Hubert/Sunova.

Time will tell ...

Dean

  

rhvic said

Thanks Dean. I was one of the earlier callers to them about this, when they first introduced this method. Let's see if they change anything.  

Sadly ... it doesn't look like they will, Rhvic.

This has been a known, ongoing security issue at Hubert for almost 5 Months now, and there's Still no sign of them doing anything about it ❗

It's very 'HickBilly', if you ask me.

Dean