News for hackers. Stuff that matters.
Re:Certificate Transparency Log Compromised via Salt Vulnera... by vegardx on Sunday May 03, 2020 @11:23PM (#23064240)
You might think so, but if that was the reason your bank would be offline a lot. Everything that these old monoliths process come in batches, at predictable intervals.

What makes banking systems reliable is that there's so much built in latency in every operation that nobody really notices if something is down for six hours.

Re:Certificate Transparency Log Compromised via Salt Vulnera... by AmericanChopper on Monday May 04, 2020 @02:05AM (#23065024)
> What makes banking systems reliable is that there's so much built in latency in every operation that nobody really notices if something is down for six hours.

This is true for settlement, but not authorization. When you spend your money it could be hours or days until the transaction is correctly reflected in your balance. But in order to spend it in the first place the transaction has to be authorized, and this happens in real time. Depending on where you live, who you bank with, what kind of card you’re using, how you’re using it... this authorization may rely heavily on your bank being available for online transaction processing, or not very much. But unless you’re doing a transaction with one of those imprint devices, your transaction must be authorized in real time by somebody.

Re:Certificate Transparency Log Compromised via Salt Vulnera... by vegardx on Monday May 04, 2020 @03:26AM (#23065410)
I sit close by to the people that deal with this at work, so my understanding is very limited. Payment processors, service providers, reconciliation, yatta yatta. We used to joke around with them about carrying cash, just in case. We stopped joking around when we realized they all did.
Re:Certificate Transparency Log Compromised via Salt Vulnera... by AmericanChopper on Monday May 04, 2020 @06:05AM (#23066253)
Payment processor could mean a number of different things. It could mean a tiny gateway operator. The sort of thing that can fail quite happily without impact transaction processing (most services you use will be backed by redundant gateways).

I carry some cash too. But the times I’ve needed it were for things like an outage of the internet connection at a restaurant, or an issue with a payment terminal provider (or for the very uncommon cash-only merchant).