4 ms·
Agreed. While some of the opinions are valid and useful, the idea of intentionally setting up weak authentication for an online bank account seems absurd. (Did
by georgefox 15y ago
Agreed. While some of the opinions are valid and useful, the idea of intentionally setting up weak authentication for an online bank account seems absurd. (Did he really suggest accepting an e-mail address in lieu of a password?)
Banks often have you confirm recent transactions on your account to verify your identity (over the phone, for example), making this data pretty sensitive. But even setting that aside, I think most people would like their balances and transaction histories to be pretty private. It only seems reasonable to me.
- michokest 15y agoIt's not "intentionally weak authentication" – it's optionally weak authentication, so users can choose how hard it is to see their data. Something completely different is securing sending out money
- zwischenzug 15y agoI think you've missed the point. It's not sufficient to let the user decide how much security they should have. It won't protect the banks from the expectations of security placed on them by others, however unreasonable that might seem.