Live data from Hacker News

Your Mother’s Maiden Name Is Not a Secret

nytimes.com

31–40 of 274 posts

Re: Your Mother’s Maiden Name Is Not a Secret

#32

Earlier quoted context omitted.

While most of those points generally are true I'd say that banking in Europe is only marginally better. They still have weird, mostly paper-based processes and decades-old mainframes (though that's not necessarily a bad thing). Not long ago the 2nd factor consisted of a paper slip with enumerated transaction numbers. You'd have a hard time finding a bank that allows you to easily export data to accounting software. A…

I'm using ING DiBa in Germany and they lack a secure 2fa method. There are only two options available: - SMS-TAN, which is vulnerable to SS7 hijacking and name spoofing. - Index-TAN, aka the enumerated paper slip, which is only "pseudo two-factor": If you computer is pwned, it can ask you for the index matching the attacker's desired transaction.

ING DiBa offers banking apps for both iOS and Android, which can also serve as 2FA for online banking via the browser. The main banking app itself isn't all that good but the 2FA feature works fine.

Re: Your Mother’s Maiden Name Is Not a Secret

#33
post #5

Earlier quoted context omitted.

> between european bank accounts is free Between European bank accounts in the same country. Also, not every European country, unfortunately. > paper cheques don't exist since over a decade They still do. They're very rarely used, but they can be useful for cases where you want to buy something like a car without changing the card limits.

> Between European bank accounts in the same country. Also, not every European country, unfortunately. Unless I'm mistaken, transfers in Europe are by law required to cost the same inside and out of the country. My Greek bank charges 1 euro for a transfer, no matter if the bank is in Greece or anywhere else in the EU. My German bank doesn't charge anything, and I pay my rent from my German account. > They're very rar…

Interesting. Is this a recent change? I paid £10 for transfer from Lloyds 5y ago.

Re: Your Mother’s Maiden Name Is Not a Secret

#34
post #4

Does anyone know the cause of the large and long standing difference in banking in US vs Europe? In europe: -for 15 or so years already, web banking has been with 2nd factor authentication (since its inception I assume). In previous decades we would get devices where you need to type numbers from its lcd screen into the webpage login. Today mobile auth apps are taking over. -I have never seen a bank have security que…

(and not called wiring, not sure what in english though)

Giro is I think the standard English term for this although it is rarely used because it is a push system while (particularly in North America) banking systems in the Anglophone world typically use cheques which are pull based.

Even coming from Canada, I was rather surprised at how ancient the US banking system is. Like it was stuck in the 80s for 2-3 decades. They are only now rolling out chip cards and frequently it is chip and sign rather than chip and PIN.

Re: Your Mother’s Maiden Name Is Not a Secret

#35
post #23

Earlier quoted context omitted.

> Between European bank accounts in the same country. Also, not every European country, unfortunately. As far as I know, it's free between all Eurozone countries. At least I regularly do transactions between countries, and I've never heard it costing a cent.

Transfers can be charged, and often are even within the same country. In Spain it is common to have "up to n monthly transfers for free, then you get charged x%". Also, I've received wrong payments on a German account from French people many times, and they claim it's because their bank charges the transaction and I receive the sent amount minus fees, with no possibilities for them to specify otherwise (that's happen…

At least both of my banks in France don't charge me anything when doing wire transfer to other European countries. So, I'm not sure how prevalent that is.

Re: Your Mother’s Maiden Name Is Not a Secret

#36

Earlier quoted context omitted.

> Between European bank accounts in the same country. Also, not every European country, unfortunately. Unless I'm mistaken, transfers in Europe are by law required to cost the same inside and out of the country. My Greek bank charges 1 euro for a transfer, no matter if the bank is in Greece or anywhere else in the EU. My German bank doesn't charge anything, and I pay my rent from my German account. > They're very rar…

Interesting. Is this a recent change? I paid £10 for transfer from Lloyds 5y ago.

I think that was because it cost money to transfer between SWIFT and SEPA. SEPA to SEPA is very cheap/free, and so is SWIFT to SWIFT, AFAIK. I haven't tried to send money between the two systems for a long time.

Re: Your Mother’s Maiden Name Is Not a Secret

#37
post #15
post #2

Haha, that's why I have been using a made up "mother's maiden" name for the past 5 years!

That's not really any better. If a site is hacked that has your made up name, that gets published on the carder sites [1] along with your other information (email, credit card number, phone). It may not work to get a new credit card in your name, but it can be used to reset your password on some other crappy site that uses that information for "forgot password". [1] https://krebsonsecurity.com/2017/12/the-market-for-…

My mother's maiden name on exactly one website is "X729gD9naatotKORNKkuV0BwSm4A8GnL". On another it's "7RQCpeaG66ffxxgEoUKwvcSZfj6hEZ3Z".

Re: Your Mother’s Maiden Name Is Not a Secret

#38
post #4

Does anyone know the cause of the large and long standing difference in banking in US vs Europe? In europe: -for 15 or so years already, web banking has been with 2nd factor authentication (since its inception I assume). In previous decades we would get devices where you need to type numbers from its lcd screen into the webpage login. Today mobile auth apps are taking over. -I have never seen a bank have security que…

Wow exactly the situation in india! We’ve had 2FA, mobile alerts, etc. ever since the dawn of the Internet banking in late 90s. Wasn’t so in the US even as recently as 2010.
Post reply on HN