4 ms·

Just look at the history of credit card security. It started with just having Name / Card Number / Expiry, all of which are printed right on the card, being al

Just look at the history of credit card security. It started with just having Name / Card Number / Expiry, all of which are printed right on the card, being all that was necessary to conduct a transaction. Then they put a magnetic strip on the back of the card and storing the same information in plain text on that strip. Then they started printing a "secret" 3 or 4 digit number (CVC) on the card for "extra" security. Now we have chips in cards which helps with brick and mortar transactions in an era when most transactions are online.

coffeebeqn 3y ago
The latest thing some do is to issue a virtual card for just one transaction. Which as far as I can tell is actually pretty good
- KMag 3y ago
  The next thing I'd like to see are deposit-only bank account numbers tied to your regular bank account number, so that you can give someone the information necessary for them to send you money via ACH without them having all the information necessary to drain your bank account. At present, I transfer money into my checking account for each and every outgoing transaction, so there's both a small time window and a small limit on the amount of a theft, and I have less to worry about giving out my checking account number for incoming transfers.
  - Terr_ 3y ago
    > The next thing Mildly related: At one point I was considering how easily someone could make an e-mail server where valid addresses were all in the form username+code@host, where users could create/manage valid codes using a smartphone app, noting which ones were for which purpose and having inactivity or expiry rules. Unlike current user+anything@host forms, a the + component would be mandatory, and an incorrect/expired code means spam filtering.
    - bear141 3y ago
      You can do something similar now with email aliasing services. Also they don’t include your primary address which is easily stripped from the + format you are describing.

coffeebeqn 3y ago

The latest thing some do is to issue a virtual card for just one transaction. Which as far as I can tell is actually pretty good

KMag 3y ago
The next thing I'd like to see are deposit-only bank account numbers tied to your regular bank account number, so that you can give someone the information necessary for them to send you money via ACH without them having all the information necessary to drain your bank account. At present, I transfer money into my checking account for each and every outgoing transaction, so there's both a small time window and a small limit on the amount of a theft, and I have less to worry about giving out my checking account number for incoming transfers.
- Terr_ 3y ago
  > The next thing Mildly related: At one point I was considering how easily someone could make an e-mail server where valid addresses were all in the form username+code@host, where users could create/manage valid codes using a smartphone app, noting which ones were for which purpose and having inactivity or expiry rules. Unlike current user+anything@host forms, a the + component would be mandatory, and an incorrect/expired code means spam filtering.
  - bear141 3y ago
    You can do something similar now with email aliasing services. Also they don’t include your primary address which is easily stripped from the + format you are describing.