4 ms·
Is it really that naive to assume that banks have higher security standards than, say, shopping list apps? ;-)
by cpach 12y ago
Is it really that naive to assume that banks have higher security standards than, say, shopping list apps? ;-)
- tptacek 12y agoI'm not sure "naive" is the word I'd choose. Let's just say those standards are often aspirational.
- cpach 12y ago:)
- wolf550e 12y agoMy bank's site is SSLv3-only. Banks do the least amount of security they can get away with, because they do not compete on security and they are insured against loss and the customers indirectly pay for the insurance via fees.
- smt88 12y agoMy friend works for Accenture. Whenever they've tried to pitch a security project to a company, the company has basically laughed in their faces. They'd rather have just paid out for a huge loss of data (think Target and Home Depot) rather than put in the money upfront. They thought the upfront money would be greater. After those aforementioned disasters, things have changed, and Accenture is now (a little bit more) able to sell security projects.