Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Postbank to replace 12M bank cards after employees steal 'master key'

timeslive.co.za

Post reply on HN
Print view View original

101–110 of 194 posts

Re: Postbank to replace 12M bank cards after employees steal 'master key'

#101

Post by stouset »

hinkley wrote: post #79
SamuelAdams wrote: post #66

Earlier quoted context omitted.

Don't forget the TSA travel master keys, which can now be 3-D printed by anyone using this repo: https://github.com/Xyl2k/TSA-Travel-Sentry-master-keys

You can use a ball point pen to pop open the zipper on any luggage. I understand that the illusion of control is very helpful for nervous passengers, but your luggage is leaving your control and it's mostly nylon fabric and plastic.

Yep. And then you can just run the locked zipper back and forth over the opened section to close it, without any evidence of it having been opened.

Re: Postbank to replace 12M bank cards after employees steal 'master key'

#102

Post by gcbw3 »

joecool1029 wrote: post #54
gcbw3 wrote: post #17

Earlier quoted context omitted.

People seem to forget why credit cards came into existence. It was not for security. Ever. Credit Cards were introduced as a less-secure-but-more-convenient-check. The store then would have a stock of "blank checks" with absolutely no security features where they would imprint with carbon paper and a pressure roll the credit card information and pretty much "mint" the client a check on the spot. Over time the raised…

>Credit Cards were introduced as a less-secure-but-more-convenient-check. Yeah, no. Diners Club was the first credit card and was released in the 1950's to aggregate and streamline paying for things on account. It was, as the name suggests a line of credit. Checking accounts could become credit accounts if they allow overdrafts but this is not the normal intent. It was not until First National of Seattle released a d…

You are completely missing the point by an internal bank semantic.

Credit cards, yes, started replacing the high APR credit-checks. And then moved to a mix of this and regular debit checks.

But the actual process, which was what i was describing, was still pretty much exactly the same used to validate a check (whichever type) at the bank branch. Where the bank will draw the funds from is not a important topic when we are talking about process of the transaction itself.

Re: Postbank to replace 12M bank cards after employees steal 'master key'

#103

Post by smooth_remmy »

SamuelAdams wrote: post #89
devcpp wrote: post #41

Earlier quoted context omitted.

Quite the opposite: the free market will deal with this just fine, giving a big penalty to companies that don't care enough. The government, on the other hand, imposes bad businesses, enables regulatory capture and has proven many times that it has no idea how to handle infosec. These white hat consultants aren't perfect but through competition they're still better than lobbied lawmakers.

The FDA made it mandatory for food manufacturers to list their ingredients on food they sell. Prior to these laws no food manufacturer was willing to do this freely, for fear of someone else stealing their recipe. But now consumers can make informed decisions and avoid foods that will give them severe, life threatening allergic reactions. Every citizen who drives a motor vehicle must be issued a driver's licence by t…

> The FDA made it mandatory for food manufacturers to list their ingredients on food they sell

FDA still allows companies to hide ingredients under the guise of "natural flavors" and "artificial flavors". I hope you aren't allergic to one of those!

> Every citizen who drives a motor vehicle must be issued a driver's licence by the state they reside in. This enables a minimum understanding of how a complex machine (the highway transportation system) works so that other drivers / participants of that system can use it safely.

License plate technology helps the government (and private companies) know where-ever you are at all times! https://www.bloomberg.com/news/articles/2018-12-06/why-priva... https://www.cnet.com/news/this-company-could-turn-every-home...

Re: Postbank to replace 12M bank cards after employees steal 'master key'

#105

Post by IggleSniggle »

baddox wrote: post #84
mitchdoogle wrote: post #78

Earlier quoted context omitted.

If we don't have a free market, it doesn't do much good to say the free market will solve any of our problems.

Huh? Presumably the suggestion is to make the market freer.

Or perhaps to acknowledge that the assumptions about a free-market ignore the realities of human psychology, and thus a free-market inherently cannot exist because humans are not capable of producing a free market without regulation, and regulation is antithetical to a truly free market?

Re: Postbank to replace 12M bank cards after employees steal 'master key'

#106

Post by [deleted] »

hinkley wrote: post #79
SamuelAdams wrote: post #66

Earlier quoted context omitted.

Don't forget the TSA travel master keys, which can now be 3-D printed by anyone using this repo: https://github.com/Xyl2k/TSA-Travel-Sentry-master-keys

You can use a ball point pen to pop open the zipper on any luggage. I understand that the illusion of control is very helpful for nervous passengers, but your luggage is leaving your control and it's mostly nylon fabric and plastic.

[deleted]

Re: Postbank to replace 12M bank cards after employees steal 'master key'

#107

Post by africanwoman »

seibelj wrote: post #42
thoraway1010 wrote: post #40

Earlier quoted context omitted.

And not the first government run entity in SA to have funds stolen from it. Transnet/PRASA (railways) Eskom (electricity) SAA (airline) All have had just totally monumental theft often at the top levels. It all seems to be pretty consequence free. Meanwhile, the hawks open immediate investigations and charge people almost immediately who are trying to expose things - which is kind of funny - 10 years to investigate t…

South Africa has insane levels of graft and corruption that have been going on for decades. They also have a lot of politically motivated assassinations. Total basket case of a country.

Replace "south africa" with the USA and your statement is equally verifiable and accurate.

Re: Postbank to replace 12M bank cards after employees steal 'master key'

#108

Post by 77pt77 »

thomasjudge wrote: post #69
77pt77 wrote: post #31

Earlier quoted context omitted.

> but the cameras in the employee area were hidden. Is this legal? Sounds like a lawsuit waiting to happen.

What law would you think is being broken here? I don't think they are talking about bathrooms, where one might argue there is a "reasonable expectation of privacy." If you are working for an employer on their premises I think they have a right to do monitoring including clandestine. Just like they can monitor anything you do on their computer

I know several jurisdictions where recording employees place of work is illegal.

Like you can record corridors and such, but you can't record him programming at his desk.

Re: Postbank to replace 12M bank cards after employees steal 'master key'

#109

Post by SamuelAdams »

hinkley wrote: post #79
SamuelAdams wrote: post #66

Earlier quoted context omitted.

Don't forget the TSA travel master keys, which can now be 3-D printed by anyone using this repo: https://github.com/Xyl2k/TSA-Travel-Sentry-master-keys

You can use a ball point pen to pop open the zipper on any luggage. I understand that the illusion of control is very helpful for nervous passengers, but your luggage is leaving your control and it's mostly nylon fabric and plastic.

Yes, but you're missing the forest for the trees. A government entity (TSA) had a thing built specifically for their needs ("secure" locks for luggage) and promised they would be the only ones capable of unlocking it. Then somehow the "secret" they promised to protect (physical keys) got leaked out somehow and now the entire thing is security theater.

Also I think they used these locks on handgun / firearm containers that were declared when travelers with a CPL or LEO people traveled. Those are typically put into a hard container that is difficult to open unless you unlock the lock.

EDIT: last paragraph is wrong, please ignore that. Thanks guys.

Post reply on HN