OT: Authenticator Apps on Windows Desktop

Am I the only one who wonders what "Top of the Pops" has to do with the NHS?

Totally One Time Password. But I must say I'm utterly and totally and totally and utterly unclear as to how I could use Keychain in this context.

Actually. I have just thought of a link between Top of the Pops and the NHS - and I wish I hadn't.

HSBC are strange. You can only logon to internet banking using a physical "secure key" (which is different from a card reader. Go figure...) or their phone mobile banking app. They don't allow logon by

If you consider any app as semi-benign malware you won't go far wrong. Just remember that /you/ are the product!

Which? seems to score HSBC highly for security.

Thank you for drawing attention to this issue. You have lead me to find that I have the same problem. I have no need for any additional security. I don't regard information about my medical condition as a great secret.

"T" in TOTP derives from time-based, as opposed to "H" in HOTP which derives from hash-based.

Theo

It was their insane desire to require me to prove that my sub £20,000 a year business wasn't money laundering that caused me to close the account.

No I didn't have an organisation chart, No, since the business was run from home, I couldn't give them any utility bills. No, since my income was entirely derived from a website and a few other things, I couldn't provide them with invoices etc. Apparently a 40 years history as a limited company and accounts at companies house wasn't enough.

So f*ck them

Me neither. I suppose there are medical conditions which might lead to blackmail if known. I will continue to resist more complex authentication than a phoned code. My recent experience attempting to confirm a doctors appointment from the URL sent to my mobile ended with a phone call to reception which can't be what they are trying to achieve. To my simple eye, there appear to be several competing NHS services attempting/failing to cover the same ground:-(

My bank's website is spectacularly free of info about how to do this.

Maybe they don't do TOTP. I don't know of any bank that uses it, they mostly do their own thing.

Theo

Does their report read:

"We tried for ages to hack into their system, but the £$%^&s kept us out!"

SWMBO is annoyed by the PA authenticator bollocks now.

This security is probably some kind of attempt to conform to data protection legislation. As for "competing NHS services" thats how the NHS is set up. Each area trust is independant and largely responsible for its own IT as are each GP practice.