[13:21] <penguin42> interesting; just had a new type of sms confirmation flow;  they display a number on the webpage, phone you and ask you to tap in that number on your phone, then do the normal sms where they send a number to you
[13:23] <zxmpi>  so they already know your number, have to hope the web page isn't a spoof page?
[13:24] <penguin42> yeh so that was after logging in with id/password
[13:25] <zxmpi> and hope they haven't had all their users/passwords pinched in the last while :-)
[13:28] <penguin42> I'm trying to figure out how it helps; I mean it confirms that the person with the phone can see the contents of the screen
[13:29] <zxmpi> just feels like an extra level of complexity, just security theatre
[13:32] <daftykins> strange stuff!
[13:33] <zxmpi> at this stage i'd be on for a go your post office to pay/sign/confirm details option. 
[13:34] <zxmpi> would keep post offices in business. get a few people off their arses. give everyone something new to complain about :-)
[13:34] <daftykins> hehe
[13:35] <zxmpi> and increase the chances of people paying ahead of you with a bucket of pennies getting bumped off :-P