3 ms·
> Analogy: You owe someone $5 for an ice cream cone. Do you hand over your wallet and all of your 2fa credentials to that person, and hope they only take $5? W
by simonh 5y ago
> Analogy: You owe someone $5 for an ice cream cone. Do you hand over your wallet and all of your 2fa credentials to that person, and hope they only take $5?
We do this all the time with online transactions. Just because the website says $5, in principle when they charge your bank they could ask for as much as they like.
- mikewarot 5y agoWhich points to a design problem with credit card transactions. They should be able to generate a one time use number for giving X money in a single transaction. I've heard of some experiments in that direction, which is hopeful.
- deleted 5y ago[deleted]
- watermelon0 5y agoIn many cases (I guess it depends on the payment gateway) I get a push notifications which opens a confirmation dialog in my bank's mobile app, where I see the merchant and the amount, and have to confirm it. I think this is most common with European payment gateways.
- simonh 5y agoSure, nowadays there are alerts that will help you spot any discrepancy more quickly, but it doesn’t stop the discrepancy occurring and we’ve been running blind on this for a very long time.