Live data from Hacker News

Your Mother’s Maiden Name Is Not a Secret

nytimes.com

141–150 of 274 posts

Re: Your Mother’s Maiden Name Is Not a Secret

#141
post #7

Earlier quoted context omitted.

> maybe a slow cobol mainframe somewhere Inter-bank money transfers in US are handled by a system that needs multiple "business days" for a transaction to be finalised so you're on the money here: https://engineering.gusto.com/how-ach-works-a-developer-pers...

Oh european banks also like to keep the money for a day. Other than that day of interest it's free though :) no 25 dollar wiring fee as seen in US

In Sweden we can transfer money instantly between banks. You essentially register a service tied to your phone number, and people can use that phone number to instantly transfer money to persons or companies without any fees. The service is called Swish [0]. The only requirement is that the receiver has registered the service to his/hers phone number, and that you can authenticate yourself using mobile BankID [1].

[0] https://medium.com/@etiennebr/swish-the-secret-swedish-finte...

[1] https://www.bankid.com/en/

Edit: Clarification of who can receive your money transfer.

Re: Your Mother’s Maiden Name Is Not a Secret

#142
post #7
post #4

Does anyone know the cause of the large and long standing difference in banking in US vs Europe? In europe: -for 15 or so years already, web banking has been with 2nd factor authentication (since its inception I assume). In previous decades we would get devices where you need to type numbers from its lcd screen into the webpage login. Today mobile auth apps are taking over. -I have never seen a bank have security que…

> maybe a slow cobol mainframe somewhere Inter-bank money transfers in US are handled by a system that needs multiple "business days" for a transaction to be finalised so you're on the money here: https://engineering.gusto.com/how-ach-works-a-developer-pers...

> Inter-bank money transfers in US are handled by a system that needs multiple "business days"

I wired some money from my US bank account to my Swedish bank account. The US bank obviously operates on a batch process basis, because around 6AM EST I got an email from my US bank saying that they've sent the money, and I should expect it within three days in my destination account.

It was already available in my Swedish bank account at that moment, because they have no delays whatsoever because what the hell is there to delay? The difference is like night and day, and I do not understand why American consumers put up with their extremely shitty banks that all seem to be stuck in the 70's. It drives me crazy.

Re: Your Mother’s Maiden Name Is Not a Secret

#144
post #125

Earlier quoted context omitted.

> Between European bank accounts in the same country. Also, not every European country, unfortunately. Unless I'm mistaken, transfers in Europe are by law required to cost the same inside and out of the country. My Greek bank charges 1 euro for a transfer, no matter if the bank is in Greece or anywhere else in the EU. My German bank doesn't charge anything, and I pay my rent from my German account. > They're very rar…

Interestingly, car dealers in Germany usually require you to pay in cash. I think this is because getting ownership of a car (the keys and papers) has legal implications and so you need an atomic transaction.

They don’t have cashier’s checks or banker’s drafts in Germany?

Re: Your Mother’s Maiden Name Is Not a Secret

#145
post #46

Earlier quoted context omitted.

A wire transfer(IBAN/BIC transfer) is different from an ACH transfer. ACH(EFTS in EU) in the US is generally free, but has a delay for clearing and has some mechanisms for reversal. This is primarily a digital check, and can be initiated by the receiver in that way. A wire transfer is nearly immediate by comparison and offers almost no option for reversal. This option does usually have a fee and is generally reserved…

> ACH(EFTS in EU) ... is primarily a digital check. Well not exactly. I have set up ACH transfer between my dad and my account, but a couple of banks didn't let me. They are like both account holder should be the same. Bank told me that the only option I have is to wire the money. On the other hand, I pay my employees through ACH (ADP take cares of it).

Most other countries allow direct person-to-person transfers with just a name and account number. In Australia you can put in someone's details and payment for something and it will be there the next morning, with no fees, directly through the government interbank system.

In the US if you want a fee-free transfer, you need to use your bank's app and take a photo of someone's check. And no, Paypal/Vinmo are not good alternatives. They're private transfer systems that are not federally mandated and regulated bank-to-bank transfers. I wrote a full post about this:

http://penguindreams.org/blog/the-american-banking-system-is...

Re: Your Mother’s Maiden Name Is Not a Secret

#146
post #125

Earlier quoted context omitted.

Interestingly, car dealers in Germany usually require you to pay in cash. I think this is because getting ownership of a car (the keys and papers) has legal implications and so you need an atomic transaction.

They don’t have cashier’s checks or banker’s drafts in Germany?

Germany is a very cash-oriented society. Many independent businesses don't take credit cards and most consumers prefer to pay in cash. Germans are very privacy-conscious, and there's a latent suspicion of debt and intangible money because of Weimar-era hyperinflation.

https://www.german-way.com/germanys-cash-culture-geld-stinkt...

Re: Your Mother’s Maiden Name Is Not a Secret

#147

Earlier quoted context omitted.

When you say fraud, do you mean theft or identity fraud? 2FA is extraordinarily relevant when it comes to theft with regard to online banking. The purpose of 2FA is mostly to prevent automated attacks or remote account entry via password resets by email or something similar. I'm not sure if you're aware, but Europe has proper 2FA in the form of a dongle type device, and not this SMS BS many companies in the US use ou…

>2FA is extraordinarily relevant when it comes to theft with regard to online banking If theft through online banking even exists, it's at such a low volume as to be irrelevant. Most online banking interfaces are a read-only view of recent transactions. Some provide the ability to transfer funds between your own linked accounts at the same bank. Fewer still provide bill pay for a specific set of partner institutions,…

I am not aware of a country in Europe where the online banking interface is not able to transfer money, both domestically and internationally vi e.g. SEPA and other methods - it’s called “online banking”...

Phishing and other things were a large attack vector until 2FA mostly did away with it.

Re: Your Mother’s Maiden Name Is Not a Secret

#149
post #4

Does anyone know the cause of the large and long standing difference in banking in US vs Europe? In europe: -for 15 or so years already, web banking has been with 2nd factor authentication (since its inception I assume). In previous decades we would get devices where you need to type numbers from its lcd screen into the webpage login. Today mobile auth apps are taking over. -I have never seen a bank have security que…

- We don't use 2FA authentication, I guess because there are more cost effective ways of verifying our identity (probably not going to last much longer with all the breaches) - ACH in the USA is free and fast (one business day)... and that's the main way of receiving salary, paying bills, etc. Is Europe really any better in this regard? - No one uses paper checks here either...

> ACH in the USA is free and fast (one business day)

One business day is slow. Not as ridiculously slow as the three business day arbitrary bullshit, but still slow. Why aren't the transfers instant? There's no reason for them not to be.

> Is Europe really any better in this regard?

Oh god yes. Europe has had Giro for a long time. https://en.wikipedia.org/wiki/Giro

Every bill comes with a receiving account number, and where I'm from all bills have been using a standardized OCR-friendly format since the 80's, which means that the payment slip of every bill is identical, which means that when we got internet banking in the mid 90's, you would just type in the numbers from the standardized fields at the bottom row of the bill to set it up. Of course, you've been able to sign up for automatic bill payment since the 90's as well, and on the off chance that you get a bill from someone you normally aren't billed by, all mobile banking apps have the option of using your phone camera to OCR the bill and pay it.

Whereas in the US, sure, most large companies can do automatic ACH withdrawal, but most small companies can't. And if you get an actual bill, no two bills look the same, so you have to figure out what the amount is and where it goes, and you only get the physical address of the receiving company, so if they aren't able to receive ACH tranfers for whatever ridiculous reason, your bank has to mail them a check, which takes five days, for some other ridiculous reason, so you have to make sure the money leaves your account five business days before the due date. (Giro payments are, of course, instant)

> No one uses paper checks here either...

It is possible to never write a check in the US, but it's actually pretty hard. There's a ton of systems and companies and organizations that require you to use checks.

I had to pay my apartment building org $50 for reserving the moving elevator for a whole day. Payment by check only.

I had to pay the final amount for my moving company when they showed up with my furniture. Cashier's checks only. Oh, and cash tips for the movers.

Do you know what I had to do to get a cashier's check? I went to my bank, and I had to WRITE THEM A CHECK for the amount on the cashier's check + their fee, for them to be able to take money out of my account and give me a cashier's check. It's absolutely fucking ridiculous, and noone there saw anything weird about it.

When you move to the US, you cannot file your taxes electronically the first year, and you cannot pay electronically either. So you have to write a check to the IRS. I had to google that shit the first time, I had never written a check in my entire life before that.

I'm renting my apartment from an individual, and she expects a check in the mail every month. Now, I've set it up to pay automatically through my bank, but my bank actually prints and mails her a check. Ridiculous.

The complete and utter shittiness of banks in the US is, for most Americans, an unknown unknown. You don't know it's shit, and you don't know how shitty it is, because you've never experienced non-shitty banks. Since you have nothing good to compare them with, you don't do the comparison, and you don't expect them to not be shitty.

I mean, look at you, you have complete goddamn Stockholm syndrome above where you think a one business day transfer is fast!

(Sorry for the rant, I'm not angry at you, I'm just so frustrated with how shitty shit shit American banks are, and that they never seem to improve.)

Re: Your Mother’s Maiden Name Is Not a Secret

#150
post #3

Every time I'm confronted with these types of questions I just roll my eyes and add a 'Mothers maiden name' text entry to my password manager with a 16 digit random string.

OT: Just wondering why so many people are using password managers. When you use a password manager you have one single point of attack and failure. I wouldn't like to give all my credentials to one single entity.

Well, personally, prior to using a password manager, I had one user name (plus variations for when that user name was already taken) and something like three different passwords for all of my services.

The passwords weren't horrible, brute-forcing them would have taken a while, but if you have the same user name and password in many services, then it just takes for one of those services to get compromised to have many of your accounts be compromisable.

And generally speaking, unless you're a high-ranking target, it's far more likely for a service to get compromised than for someone to even bother attacking your device.

And yeah, sure, I could have just remembered more different passwords and user names, but I'm a human and that requires effort.

Now when using a password manager, I can easily choose different user names, e-mail addresses, passwords and far more complicated passwords as well. And all of that with basically no effort.

This also improves privacy, as with different user names it's much harder to link up my different accounts' postings. And I can now easily maintain multiple accounts for the same service, too, allowing me to spread out postings across those, so that you can't follow back my post history for all eternity to link up all kinds of information that I've posted over time.

Post reply on HN