51–60 of 274 posts
Does anyone know the cause of the large and long standing difference in banking in US vs Europe? In europe: -for 15 or so years already, web banking has been with 2nd factor authentication (since its inception I assume). In previous decades we would get devices where you need to type numbers from its lcd screen into the webpage login. Today mobile auth apps are taking over. -I have never seen a bank have security que…
Every time I'm confronted with these types of questions I just roll my eyes and add a 'Mothers maiden name' text entry to my password manager with a 16 digit random string.
This works great until you call your bank for some reason and they ask you for your moms maiden name. Urgh, it sucks.
Earlier quoted context omitted.
My mother's maiden name on exactly one website is "X729gD9naatotKORNKkuV0BwSm4A8GnL". On another it's "7RQCpeaG66ffxxgEoUKwvcSZfj6hEZ3Z".
That may work in cases of online password resets, but I believe it has been demonstrated that they are not great for social engineering reasons. A hacker can just say, "oh I just mashed the keyboard for that" or worse, the agent thinks it is an error or glitch and let's the hacker in. I think best to use a real, but different last name on all your sites.
Every time I'm confronted with these types of questions I just roll my eyes and add a 'Mothers maiden name' text entry to my password manager with a 16 digit random string.
This works great until you call your bank for some reason and they ask you for your moms maiden name. Urgh, it sucks.
Earlier quoted context omitted.
> Between European bank accounts in the same country. Also, not every European country, unfortunately. Unless I'm mistaken, transfers in Europe are by law required to cost the same inside and out of the country. My Greek bank charges 1 euro for a transfer, no matter if the bank is in Greece or anywhere else in the EU. My German bank doesn't charge anything, and I pay my rent from my German account. > They're very rar…
> None of the banks I have accounts with ever gave me a chequebook. We have to request them and pay a small fee for them. They aren’t typically issued when you open the account. You just receive a debit card. Exceptions may exist. This is only my experience.
Haha, that's why I have been using a made up "mother's maiden" name for the past 5 years!
That's not really any better. If a site is hacked that has your made up name, that gets published on the carder sites [1] along with your other information (email, credit card number, phone). It may not work to get a new credit card in your name, but it can be used to reset your password on some other crappy site that uses that information for "forgot password". [1] https://krebsonsecurity.com/2017/12/the-market-for-…
Does anyone know the cause of the large and long standing difference in banking in US vs Europe? In europe: -for 15 or so years already, web banking has been with 2nd factor authentication (since its inception I assume). In previous decades we would get devices where you need to type numbers from its lcd screen into the webpage login. Today mobile auth apps are taking over. -I have never seen a bank have security que…
Online banking isn’t a serious attack vector for fraud, it’s just a faster-updating alternative to a paper monthly statement. 2FA is a silly red herring in these discussions. The problem is fundamentally the transaction model where you pull money from someone’s account simply by knowing some widely-shared secret numbers. These systems are sticky due to network effects. There’s no reason to sign up for an alternative…
I'm not sure if you're aware, but Europe has proper 2FA in the form of a dongle type device, and not this SMS BS many companies in the US use out of laziness. They also need to use this device for not just online banking, but basic everyday transactions.
Earlier quoted context omitted.
I shares worries I've seen expressed elsewhere that this opens up a social engineering attack vector where an imposter gets through to phone support and says "oh I just typed a bunch of gibberish for the answer and can't remember it." Wouldn't a false, long, maybe hyphenated, but plausible surname be better for this reason?
I also generate them with a password manager. FWIW, I always start with “it’s a long gibberish string” and no one has ever been satisfied with that. I’ve always had to recite it. Anecdotal I know.
Does anyone know the cause of the large and long standing difference in banking in US vs Europe? In europe: -for 15 or so years already, web banking has been with 2nd factor authentication (since its inception I assume). In previous decades we would get devices where you need to type numbers from its lcd screen into the webpage login. Today mobile auth apps are taking over. -I have never seen a bank have security que…
Paper cheques do exist in Germany.