5 ms·
This. Most people don’t appreciate that banks are responsible for most of the attack vectors that cause their customers to lose money. No 2FA options. Password
by cal5k 8y ago
This. Most people don’t appreciate that banks are responsible for most of the attack vectors that cause their customers to lose money.
No 2FA options. Passwords are used directly to connect your bank account to third party apps rather than OAUTH.
For merchants, it’s worse. It’s 2018 and banks still allow Catch Me If You Can-style NSF fraud, even for ACH/EFT payments. Poor KYC practices that allow people to open accounts with fake identities. The list goes on.
- dalore 8y agoA few banks in the UK send you a device which they use to challenge you with a code, you put you card in and type the pin and then their code, and it gives you back another code which you put into the website.
- cal5k 8y agoProbably an RSA token. They're common for business banking but not for retail banking, or at least not in North America.