Earlier quoted context omitted.
The interesting question is "Would you pay a reward to a finder (~10%)?".
I would not. It's an insult.
Then you are a cheap skate on the cost of other wallet loosers.
The Bank Job – breaking a mobile banking application
31–40 of 42 posts
Re: The Bank Job – breaking a mobile banking application
#32Earlier quoted context omitted.
The options aren't just returning it or stealing it, they can simply leave it where it is to avoid the hassle of having to return it. Hence why having a custom of paying a reward might be beneficial for wallet losers in general.
I'd like to feel like people would be ethically and morally motivated to make efforts to do the right thing rather than expect to be rewarded for doing the right thing. Perhaps it is how I was raised, but it seems weird to me that I would turn in a lost wallet with expectation to get something back out of it. This so-called "custom" is not my custom. It actually seems very childish, where one is still in the phase of…
It's a bit far stretched but: You can expect people to be ethically and morally motivated or you can apply security patches to your servers.
Re: The Bank Job – breaking a mobile banking application
#33Having done similar pentests on similar applications during my previous jobs, you can imagine the level of security many editors have on the pair (client app, server). And we are talking here about a banking application: banks have always been more concerned buy security than other software consumers.
Re: The Bank Job – breaking a mobile banking application
#34This is the result of hiring mediocre developers and not performing sufficient security testing/analysis and threat modeling.
Re: The Bank Job – breaking a mobile banking application
#35Earlier quoted context omitted.
He is in Sweden. So definitely safer than being in India :-) Adding to that, I don't think bad guys from the computer world would go to great lengths to harm someone from physical world.
I wouldn't be so sure of that. Being in Switzerland definitely helps, but still, India being a very big country it wouldn't surprise me if they had some really-bad-guys(TM) mafias capable of hurting people in other countries. Of course, a small thing like this wouldn't necessarily pop up in their radars but still... I guess part of the reason I think this way is because I live in a country where this is a real threat…
> Switzerland
I see what you did there.
Re: The Bank Job – breaking a mobile banking application
#36Earlier quoted context omitted.
He is in Sweden. So definitely safer than being in India :-) Adding to that, I don't think bad guys from the computer world would go to great lengths to harm someone from physical world.
I wouldn't be so sure of that. Being in Switzerland definitely helps, but still, India being a very big country it wouldn't surprise me if they had some really-bad-guys(TM) mafias capable of hurting people in other countries. Of course, a small thing like this wouldn't necessarily pop up in their radars but still... I guess part of the reason I think this way is because I live in a country where this is a real threat…
[deleted]
Re: The Bank Job – breaking a mobile banking application
#37Earlier quoted context omitted.
He is in Sweden. So definitely safer than being in India :-) Adding to that, I don't think bad guys from the computer world would go to great lengths to harm someone from physical world.
I wouldn't be so sure of that. Being in Switzerland definitely helps, but still, India being a very big country it wouldn't surprise me if they had some really-bad-guys(TM) mafias capable of hurting people in other countries. Of course, a small thing like this wouldn't necessarily pop up in their radars but still... I guess part of the reason I think this way is because I live in a country where this is a real threat…
[deleted]
Re: The Bank Job – breaking a mobile banking application
#38Re: The Bank Job – breaking a mobile banking application
#39Earlier quoted context omitted.
I wouldn't be so sure of that. Being in Switzerland definitely helps, but still, India being a very big country it wouldn't surprise me if they had some really-bad-guys(TM) mafias capable of hurting people in other countries. Of course, a small thing like this wouldn't necessarily pop up in their radars but still... I guess part of the reason I think this way is because I live in a country where this is a real threat…
> Switzerland I see what you did there.
This never gets old.
Re: The Bank Job – breaking a mobile banking application
#40Earlier quoted context omitted.
I'd like to feel like people would be ethically and morally motivated to make efforts to do the right thing rather than expect to be rewarded for doing the right thing. Perhaps it is how I was raised, but it seems weird to me that I would turn in a lost wallet with expectation to get something back out of it. This so-called "custom" is not my custom. It actually seems very childish, where one is still in the phase of…
It's a bit far stretched but: You can expect people to be ethically and morally motivated or you can apply security patches to your servers.
I think I'm bikeshedding; the whole "finder's fee" nonsense bugged me. The analogy between lost wallets and servers doesn't actually hold. One can have thieves and indifference in both worlds, but the natures of the exposed items and victims are different. It is more acceptable to people -- though not any more right -- to figure that a faceless multi-million dollar corp can absorb a tiny theft/hit, but it is harder to allow pain to a relatable fellow human being. (...unless, of course, one is affected by bystander effect or pressured by authority)