4 ms·

The funny thing is; most banks hat I've experienced will plaster warnings all over the SMS and apps not to give this information to someone who calls you etc.

The funny thing is; most banks hat I've experienced will plaster warnings all over the SMS and apps not to give this information to someone who calls you etc. The issue is that people are afraid (to lose their money) and aren't educated about the risks, and who/what they should pay attention to, so they hand it over anyway. People need to learn to fail shut.

yieldcrv 2y ago
I think it works because banks have nonsensical security already Even if you are educated, you’re still confronted with insecure security measures and stonewalled by the customer service agent that’s asking you to complete a measure, until you complete it Getting a call with another nonsensical security measure would be onbrand
- alias_neo 2y ago
  Like when _they_ call you, and ask you to confirm who you are? Uh, how about you confirm who I am after you confirm who _YOU_ are?!
  - enneff 2y ago
    This is just so messed up. I’ve spent so much time trying to teach the more vulnerable people in my life how to protect their accounts, only to have their f’n bank call them up and ask them to do the exact opposite.
    - alias_neo 2y ago
      Yeah, my bank hasn't done it in a while, so I'm hoping they've sorted them selves out, but it happened a lot years ago. They'd call me to confirm a payment and ask me to identify myself, it wasn't even a payment I was making at that moment. At least now with the current tech it's done via the app etc at point of sale.
- dspillett 2y ago
  > I think it works because banks have nonsensical security already Like FirstDirect changing the password requirements for their app from the already far from best practice "between 5 and 9 case-sensitive alphanumeric" down to "6 digits" and making a show and dance about this being "just as secure as before"… Suffice it to say that I've spread my financial resources a bit more widely than that one organisation now (and I'm considering a more complete move, but a lot of the competition is no better). I want there to be more than my unlocked phone and give digits between the bulk of my money and anyone who wants access to it.
  - yieldcrv 2y ago
    Agent on phone: “What’s the address on file, to confirm it’s you” I don’t know, I’m already logged in to the online banking I can just go to profile and see what’s there. I’ll read it but this isn’t secure “Thanks! That matches what I have on file too!”
lijok 2y ago
The issue is that banks have asinine security practices.

yieldcrv 2y ago

I think it works because banks have nonsensical security already Even if you are educated, you’re still confronted with insecure security measures and stonewalled by the customer service agent that’s asking you to complete a measure, until you complete it Getting a call with another nonsensical security measure would be onbrand

alias_neo 2y ago
Like when _they_ call you, and ask you to confirm who you are? Uh, how about you confirm who I am after you confirm who _YOU_ are?!
- enneff 2y ago
  This is just so messed up. I’ve spent so much time trying to teach the more vulnerable people in my life how to protect their accounts, only to have their f’n bank call them up and ask them to do the exact opposite.
  - alias_neo 2y ago
    Yeah, my bank hasn't done it in a while, so I'm hoping they've sorted them selves out, but it happened a lot years ago. They'd call me to confirm a payment and ask me to identify myself, it wasn't even a payment I was making at that moment. At least now with the current tech it's done via the app etc at point of sale.
dspillett 2y ago
> I think it works because banks have nonsensical security already Like FirstDirect changing the password requirements for their app from the already far from best practice "between 5 and 9 case-sensitive alphanumeric" down to "6 digits" and making a show and dance about this being "just as secure as before"… Suffice it to say that I've spread my financial resources a bit more widely than that one organisation now (and I'm considering a more complete move, but a lot of the competition is no better). I want there to be more than my unlocked phone and give digits between the bulk of my money and anyone who wants access to it.
- yieldcrv 2y ago
  Agent on phone: “What’s the address on file, to confirm it’s you” I don’t know, I’m already logged in to the online banking I can just go to profile and see what’s there. I’ll read it but this isn’t secure “Thanks! That matches what I have on file too!”

lijok 2y ago

The issue is that banks have asinine security practices.