4 ms·

> But should they? Should we also accept Google's browser signing and ban all browsers the bank doesn't like? If you want to hold the banks liable for fraud co

> But should they? Should we also accept Google's browser signing and ban all browsers the bank doesn't like? If you want to hold the banks liable for fraud committed against you (which is exactly what happens in many countries), then it’s hardly reasonable to say that they’re not allowed to use what ever technical options they can to prevent that fraud. You can put forward the argument that banks simply shouldn’t be responsible for fraud committed against their customers. But we only need to look at world of cryptocurrencies to see how well that works in reality.

anthk 1y ago
Then that vendor need to go to /dev/null and end its business.
- avianlyric 1y ago
  You might struggle to run a financial system without any financial institutions. Once again just look at the wonderful world of cryptocurrencies. They’re speed running all the historical financial scams, and rediscovering why financial regulation exists.
creata 1y ago
> it’s hardly reasonable to say that they’re not allowed to use what ever technical options they can to prevent that fraud. Of course it's reasonable? You can give someone a job and also ask them to do it a certain way.
- richardwhiuk 1y ago
  It's unreasonable to ask them to do a job, and then tie both their hands behind their back and tell them they have to accept being punched in the stomach and that they should be happy about this. If you want to tax banks and pay the money directly to fraudsters, I guess that's a model you can aim for.
- avianlyric 1y ago
  > You can give someone a job and also ask them to do it a certain way. And they can say “no”. Which is pretty much what the banks do.
  - creata 1y ago
    Obviously I'm talking about potential regulation, not individuals walking up to the bank and asking them nicely.
    - avianlyric 1y ago
      That’s a different kettle of fish, and to that I say, good luck. Regulators are one of the entities pushing for these types of limitations. It’s a natural consequence of doing a risk assessment, very hard to justify not applying these limits when explaining to a regulator how you keep your customer funds safe. I’m speaking from experience here having worked with a team that attempted exactly that, but ultimately ended up adding jailbreak/rooting detection anyway.

anthk 1y ago

Then that vendor need to go to /dev/null and end its business.

avianlyric 1y ago
You might struggle to run a financial system without any financial institutions. Once again just look at the wonderful world of cryptocurrencies. They’re speed running all the historical financial scams, and rediscovering why financial regulation exists.

creata 1y ago

> it’s hardly reasonable to say that they’re not allowed to use what ever technical options they can to prevent that fraud. Of course it's reasonable? You can give someone a job and also ask them to do it a certain way.

richardwhiuk 1y ago
It's unreasonable to ask them to do a job, and then tie both their hands behind their back and tell them they have to accept being punched in the stomach and that they should be happy about this. If you want to tax banks and pay the money directly to fraudsters, I guess that's a model you can aim for.
avianlyric 1y ago
> You can give someone a job and also ask them to do it a certain way. And they can say “no”. Which is pretty much what the banks do.
- creata 1y ago
  Obviously I'm talking about potential regulation, not individuals walking up to the bank and asking them nicely.
  - avianlyric 1y ago
    That’s a different kettle of fish, and to that I say, good luck. Regulators are one of the entities pushing for these types of limitations. It’s a natural consequence of doing a risk assessment, very hard to justify not applying these limits when explaining to a regulator how you keep your customer funds safe. I’m speaking from experience here having worked with a team that attempted exactly that, but ultimately ended up adding jailbreak/rooting detection anyway.