Live data from Hacker News

Establishing secure connection

wellsoffice.wellsfargo.com

81–90 of 161 posts

Re: Establishing secure connection

#81

This is one of those things that is done by people going "We need our customers to 'feel secure'". I get the rationale, but is there actually any data that suggests this gives that actual feeling? That users "feel" more secure? Or are more trusting of the site? Or is this just cargo-cult UX? edit: I've seen this on too many financial apps to think it's an isolated incident. It's clearly a "thing" in financial apps (T…

Here's one related study, "examining the extent to which individuals will tolerate delays when told that such delays are for security purposes..."

http://cs.brown.edu/~sk/Publications/Papers/Published/emcahk...

Please Continue to Hold: An Empirical Study of User Tolerance of Security Delays

Re: Establishing secure connection

#82
post #25

Somewhere, deep within Wells Fargo HQ, there was a depressed developer in a windowless office that died a little inside when asked to make this.

I worked with the dev who wrote this at Wells Fargo. To be fair, they do have windows in their office.

"To be fair, they do have windows in their office." Nice wordplay.

Not all work we do can be enjoyable, unfortunately. I bet this is a fun jab to bring up with him at parties. "Remember that time Wells made you make that security gif?"

Re: Establishing secure connection

#84
post #74
post #55

Earlier quoted context omitted.

We implemented a similar thing a few years ago at a company I worked at. We designed a very fast system zero-knowledge matching over zillion entries. It was way faster than the "competition" (which arguably were slow because they just never cared). It took a few hours instead of a few days to run, basically. While the results were 99.99% the same as from the slower solution, customers would think "it can't be right"…

Then sell them the more advanced faster one for more money.

"Use our advanced cloud infrastructure to generate reports in under 8 hours!"

Re: Establishing secure connection

#85

this page doesn't actually do anything. It loads two animated gifs from Akamai (one for the text, and one for the bar), and then uses some javascript to close the window. If I had to guess, there's a login page. When you submit your login, this page pops up and displays while the login is processed. source: Loading.... var selfClose = function() { self.close(); }; window.onload = function() { setTimeout(selfClose, 10…

My favorite part is the onblur function.

Re: Establishing secure connection

#86
post #68

Earlier quoted context omitted.

Human psychology is irrational and unpredictable only for very narrow definitions of rationality. Just because we don't understand the brains operation doesn't mean it doesn't behave rationally

Those definitions of rationality are useful _because_ they are narrow. If you redefine "rational" to mean "how the brain operates", you might be able to stop using the word "irrational", but...all the phenomena that previously fell into the "irrational" category will still exist, and people will still want to discuss them, so you might as well just use the same word for them as everyone else does.

The term "rational" is already well defined. I was claiming that the OPs understanding of the meaning of rationality was limited, not that the term rationality was narrow.

There are many other words and phrases available for us to talk about this concept that are well understood and do not need to be redefined.

Re: Establishing secure connection

#87
post #66

This reminds me of a story I heard about those ATMs. What I heard is that there are technologies out there that can make a machine to count/validate cash almost instantaneous while not sacrificing accuracy. But apparently, that makes some customers worry that their money is not being processed right, and thus, every time you deposit money to those ATMs, they make that grinding noise, appears to be doing something use…

Which pisses me off because I'm wondering what the heck is taking so long. If the vending machine can count a dollar instantly, why can't the ATM do it. On the other hand, whatever algorithm they're using for the handwriting recognition on checks is pretty amazing. I've deposited 100's of checks and I've only had to type an amount once.

A state of the art surely advanced by the USPS. Every time I scribble out an address in my awful handwriting I pause for a second to appreciate the USPS software that reads this and turns it into a barcode. Though to be fair I think all it has to do is decipher the zip code.

Re: Establishing secure connection

#88
post #62

This reminds me of something we had at my office about 15 years ago because people were complaining their workstations were slow. In reality, their workstations were just slow machines; standard issue box for most people was a 70MHz Sun SS-5. So we wrote a perl script that printed out a bunch of platitudes like these, while printing out an ASCII "progress bar." It had some randomly determined sleep() calls in there t…

My father was an audio engineer/mixer and worked with some big names. He told me a similar story that happened to him later in life when he finally owned his own studio.

There were clients that would always insist on making audio adjustments, for no good reason at all. They were paying to have their music professionally mixed, yet still insisted on making adjustments and changes. Finally my dad and his friend came up with a great solution.

Mind you this was prior to everything being digital, so what they did was they had a massive 24 track. (a really big machine where you can individually adjust the sound of each track) Well what they did was installed a knob that looked just like the other ones in the track, but placed it a bit lower and near to where the client would be sitting.

The client was then told they can adjust the "openness", or the "richness" by adjusting this rotating knob to a particular setting (remember, the knob does nothing, and isn't connected anywhere). My dad said clients would spend hours adjusting this knob until they got it "just right", and would make sure to let everyone know in the studio that knob was dialed in and to not touch it.

It's amazing how many silly things people have to do in all walks of life to placate the ignorant.

Re: Establishing secure connection

#89
post #63

Earlier quoted context omitted.

I worked for a company that implemented a similar technique and it had positive results. The main features of one of their web based software products was a report generator. The report was quite complex and included a lot of calculations based hierarchical relationships of entities in the system. To build this report by hand would probably take hours, but the queries and calculations were all highly optimized and co…

This reminds of airport nowadays. They were getting a lot of complaints about the slow speed that checked luggage comes out of after landing, so they simply moved all arriving flights' gates to the furthest away possible from the luggage claiming area. People had to literally walk across the airport after they get off, but complaints about luggage speed dropped significantly.

Actually, if I remember well (ut can<t remember where I get that from), another reason was so that people walk a little while to let their back recover from slouching all the flight before they pickup their heavy suitcase. Meaning in the end they had to bring less people out on a wheelchair.

Re: Establishing secure connection

#90

This is one of those things that is done by people going "We need our customers to 'feel secure'". I get the rationale, but is there actually any data that suggests this gives that actual feeling? That users "feel" more secure? Or are more trusting of the site? Or is this just cargo-cult UX? edit: I've seen this on too many financial apps to think it's an isolated incident. It's clearly a "thing" in financial apps (T…

I don't know, but it demolishes the last shred of confidence I had that Wells Fargo had anything resembling a clue about technology, and security of web apps in particular.

I've used a few of their services before, and they are all horrible abominations from signup on through.

Post reply on HN