News for hackers. Stuff that matters.
Re:The Fed Is Down by dragontamer on Wednesday February 24, 2021 @02:23PM (#26254369)
https://engineering.gusto.com/how-ach-works-a-developer-pers...

A good time to remind people that the USA's money-transfer system (aka: ACH) is a giant Rube-Goldberg machine involving FTP transfers of specially formatted files.

So it sounds like the Fed's FTP server is down?? Or something like that?

Re:The Fed Is Down by toomim on Wednesday February 24, 2021 @04:29PM (#26256262)
Fedwire is not ACH. Those are different systems.

[1] https://en.wikipedia.org/wiki/Fedwire

[2] https://en.wikipedia.org/wiki/ACH_Network

Fedwire is a much faster, more modern system than ACH. You can only access it if you are a bank, though. ACH is available to anyone, but it's old and uses FTP.

There are also a faster modernized next-day and same-day versions of ACH available as of the last few years. I haven't checked out their protocols, though, to see if they still use FTP.

Re:The Fed Is Down by efficax on Wednesday February 24, 2021 @03:51PM (#26255680)
Some of the first software I ever wrote for pay was a daily shell script that pgp encrypted an ACH batch and sent it from one financial institution to another over a dedicated frame-link, via FTP. This was over 20 years ago! Can't believe it's still the same.
Re:The Fed Is Down by cout on Wednesday February 24, 2021 @04:32PM (#26256311)
Sounds like bliss! Twenty years ago I was working on a project that received financial data through a Y-cable connected to a printer port. One day, we stopped getting data and could not figure out why. Turns out the printer had run out of paper.
Re:The Fed Is Down by aksss on Wednesday February 24, 2021 @04:43PM (#26256434)
We had to write jobs to encrypt the NACHA files and send over FTP years ago, but I was at the same company long enough (prior to 2010) to see the banks at least adopt SFTP. Slightly better, but still encrypted the files. Hey, it works and is reliable. I learned banks are really cheap, though, definitely not in the mood to spend money on new systems/processes even if they'd improve productivity.
Re:The Fed Is Down by agumonkey on Wednesday February 24, 2021 @03:53PM (#26255711)
> involving FTP transfers of specially formatted files.

during my internship, a big healthcare representative came at the company to ask for help about their IT system. Turns out it was mass FTP transfer. I was silent for a few minutes thinking hospital networks relied on this.

Re:The Fed Is Down by dmd on Wednesday February 24, 2021 @06:36PM (#26257698)
And then there's DICOM for transferring medical images, which most places don't authenticate at ALL (or do just based on the AETITLE, which is almost always the name of the manufacturer e.g. SIEMENS).
Re:The Fed Is Down by throwawayboise on Wednesday February 24, 2021 @02:46PM (#26254688)
It's OK, customers can use the backup system which is sending in 9-track tape reels via FedEx.
Re:The Fed Is Down by analog31 on Wednesday February 24, 2021 @08:20PM (#26258604)
It's reassuring to know that our money system is safe from parity errors.
Re:The Fed Is Down by samstave on Wednesday February 24, 2021 @07:25PM (#26258178)
So an FTP story of history:

TL;DR: this is how LinuxCare came to be:

1997 - BindCo was a contract manfacturer for the publication of all SUN Systems OS CD media...

Based in Redwood City Ca.

I was the IT manager there...

So SUN has a conf call with us, as we were creating and serving and receiving orders via FTP (I cant recall the name for the process) - but basically: We would receive an order manifest via FTP to a server and then we would have to make an order form for what was required...

Our FTP servers required us to login and manually accept and find these manifests....

So we hired some consultants; Dave Sifry and some others who went on to google etc..

But here was the thing:

We were taking orders via FTP and SUN wanted us to start accepting this new protocol they deemed XML and wanted us to be the test case for XML and I did something stupid:

I, on a call with SUN, said the following as a young IT manager:

"So let me get this straight; *"You have a crappy data reporting system and you want us to install an unknown system called XML for data qualification into our system and we have never heard of it"*

Yeah, I might have prevented months of adoption of XML by accident.

What have you done as a major fuck-up in your career?

That company became LinuxCare and Sifry was valued at $100 million

Just based on me telling david he should create a company that offered Linux support...

Re:The Fed Is Down by ohiovr on Wednesday February 24, 2021 @02:32PM (#26254481)
Why wouldn't they use SFTP?
Re:The Fed Is Down by sodality2 on Wednesday February 24, 2021 @02:44PM (#26254646)
Meet the US government... Triple DES is still used for backwards compatibility in banking
Re:The Fed Is Down by dragontamer on Wednesday February 24, 2021 @03:22PM (#26255262)
The Fed is a private entity actually.

The Treasury is US Government. But the Fed is owned by the member banks. The US kinda coopted a seat at their table and Congress + President appoints the Fed head. But otherwise, the rest of the board is made up by private companies.

Re:The Fed Is Down by Meekro on Wednesday February 24, 2021 @03:38PM (#26255501)
Calling the Fed a private entity is really misleading. It was created by an act of Congress and its highest ranking officials, the Board of Governors, are all appointed by the President.

Yes, it shares some power with the banks it regulates (who can elect representatives), but the US government didn't "coopt a seat at the table." It built the table and had most of the seats from the start.

And it's true that member banks own stock in the Fed, but it's a super-funky kind of stock ownership. That stock can't be sold or traded, and doesn't grant the kind of voting rights one normally associates with stock ownership. It only entitles the stockholder to their share of the dividends the Fed pays every year. The Fed actually returns nearly all of its profits (something like 95%) to the US Treasury, and pays the rest as dividends to shareholder banks.

Re:The Fed Is Down by jerry1979 on Wednesday February 24, 2021 @04:20PM (#26256144)
Correct me if I'm wrong, but people constructed a cleavage between the Fed and the US Govt because they thought we shouldn't trust democracy with money creation.
Re:The Fed Is Down by dragontamer on Wednesday February 24, 2021 @04:23PM (#26256188)
The proper role of the US Government and Money has been under debate ever since Hamilton was appointed Treasury Secretary under George Washington. (EDIT: actually, even earlier than that, but the country didn't exist yet...)

Jefferson wanted one system, Hamilton wanted another. And the two sides have been arguing for the past 200+ years. Sometimes, the central bank appears, sometimes it disappears. Then silver+gold, then removal of the silver standard (gold-only standard), then etc. etc. etc.

The Revolutionary War required money and bonds. Immediately upon the end of that war came the question of how to organize and pay those loans. Should it be held by the states? Or by the national government? Should a central bank even exist, or is a loose collection of banks good enough? Should there be a national currency, or should the States make their own currency? The Continental Congress's dollar was hit severely by inflation: losing 99% of its value in just a decade or so. Not a big deal: most Americans used Spanish Pesos back then due to their reliable silver weight.

The money issue was front-and-center at the birth of this country. Lots of debate and discussion (and duels!!) occurred over the issue. Arguing about money (literally to death) is a proud American tradition.

Re:The Fed Is Down by dragonwriter on Wednesday February 24, 2021 @10:43PM (#26259453)
> The proper role of the US Government and Money has been under debate ever since Hamilton was appointed Treasury Secretary under George Washington. (EDIT: actually, even earlier than that, but the country didn't exist yet...)

In regard to the parenthetical, the country existed either from the First Continental Congress, the Declaration of Independence, the Articles of Confederation, or the surrender at Yorktown, but in any case before the adoption of the Constitution, much less Hamilton's appointment under it as the first Secretary of the Treasury, which is a really odd point to chose as the starting point of the nation.

Re:The Fed Is Down by rsj_hn on Wednesday February 24, 2021 @10:26PM (#26259352)
That cleavage is de facto, not de juris.

From the Federal Reserve Act, Section 10.6 "Nothing in this Act contained shall be construed as taking away any powers heretofore vested by law in the Secretary of the Treasury which relate to the supervision, management, and control of the Treasury Department and bureaus under such department, and wherever any power vested by this Act in the Board of Governors of the Federal Reserve System or the Federal reserve agent appears to conflict with the powers of the Secretary of the Treasury, such powers shall be exercised subject to the supervision and control of the Secretary."

The constitution gives Congress the power to create money, then congress delegated this right to Treasury by passing the legal tender act in 1862. This right has been delegated to the Federal Reserve system so they now issue Federal Reserve Notes, but is subject to the supervision and control of the Secretary of the Treasury as specified in 10.6

But in practice we give the Fed leeway so as to not be seen as interfering in money creation and reserve policy because that is what financial markets demand and is what the general class of educated and influential people believe is the best approach.

Re:The Fed Is Down by dragonwriter on Wednesday February 24, 2021 @10:38PM (#26259420)
> Correct me if I'm wrong, but people constructed a cleavage between the Fed and the US Govt because they thought we shouldn't trust democracy with money creation.

Not exactly.

The government created a cleavage between the Fed (and, therefore, monetary policy) and Congress/Treasury (and, therefore, fiscal policy), because they perceived that faith in the currency would be enhanced and government borrowing would be cheaper if currency users (including potential dollar-denominated debt holders) knew that the entity responsibly for borrowing and repaying the debt had a strong (even if only political, and not strictly binding) barrier to monetization of the debt.

Re:The Fed Is Down by Meekro on Wednesday February 24, 2021 @04:56PM (#26256596)
You're right-- the Fed Board of Governors members are appointed by the President for 14-year terms, which is supposed to make them more independent.

I'd say that what you're describing isn't limited to just fears about money creation, though. It's part of the broader notion in most Western democracies that permanent (or semi-permanent) bureaucrats are more trustworthy than elected officials. It's not just the Fed: Presidents who tamper with the Department of Justice too much, for example, are often criticized for intruding on its "independence."

This notion has both practical problems-- who can fire an "independent" bureaucrat run amok?-- and constitutional problems-- the Constitution says "the Executive power is vested in the President" and makes no allowances for any Executive power to be wielded outside the President's control. The Supreme Court has been known to remind everyone of this fact when it's forgotten. For example, the Consumer Financial Protection Bureau has a director who is appointed by the President for a 5 year term, and can only be fired for a narrow list of reasons. The Supreme Court struck down that restriction and said, roughly, that any inquiry into why the President is firing a particular bureaucrat would infringe on the Executive power that is vested in the President alone.

Nonetheless, this idea that some power is "too dangerous to be wielded by elected officials" is alive and well, like with the Federal Reserve. It just can't be wielded too far from the President-- and yes, the President can remove members of the Fed Board of Governors, though it isn't commonly done.

Re:The Fed Is Down by dragonwriter on Wednesday February 24, 2021 @11:01PM (#26259554)
> This notion has both practical problems-- who can fire an "independent" bureaucrat run amok?

The President; “independent” officers and agencies (to the extent that this is a formal distinction, “independence” is often attributed on a softer political basis to regular executive agencies and officers, too) are those who (or, for agencies, whose group of principals are) legally protected against Presidential removal except for specified cause.

And also Congress, as such officers are civil officers subject to impeachment.

> For example, the Consumer Financial Protection Bureau has a director who is appointed by the President for a 5 year term, and can only be fired for a narrow list of reasons. The Supreme Court struck down that restriction and said, roughly, that any inquiry into why the President is firing a particular bureaucrat would infringe on the Executive power that is vested in the President alone.

No, it didn't. It struck down the combination of that protection and a single-director government structure, declaring that because Congress had established a single-responsible-officer structure, it could not also (even though the CFPB exercised quasi-legislative and quasi-judicial functions, do which the Court had allowed similar arrangements for multidirector agencies) restrict dismissal of the director to limited cause.

It very much did not find that any legal restriction on why the President is firing a particular bureaucrat “would infringe on the Executive power that is vested in the President alone” (and, in fact, a wide array of bureaucrats in the federal executive enjoy exactly the kind of protection that was not permitted to the head of the CFPB because of the structure of the agency.)

And it even moreso did not find that any inquiry into such a firing (such as the Congress might do before applying after-the-fact, discretionary consequences like impeachment and removal) would violate the Executive Power.

Re:The Fed Is Down by Meekro on Thursday February 25, 2021 @07:08PM (#26270047)
Thank you for your reply-- you got me to reread Seila Law v. CFPB and I now agree with you. The fact that the CFPB had a single officer was clearly important to the outcome of the case.

I agree with the outcome of that case, but don't think it goes far enough. Scalia's dissent in Morrison v Olson seems like the best understanding of the Constitution's requirement that "the executive Power shall be vested in a President" and that "he shall take Care that the Laws be faithfully executed." To Scalia, the President cannot be deprived of control anywhere a "purely executive power" is exercised.

Re:The Fed Is Down by natchy on Wednesday February 24, 2021 @04:44PM (#26256454)
Yes created by an act of Congress but is not under the jurisdiction of congress or the president, apart from appointments.
Re:The Fed Is Down by Meekro on Wednesday February 24, 2021 @05:04PM (#26256686)
The Fed is completely under the US government's control. Congress created it by passing a law, and could pass another law to restructure it if they ever wanted to. The President fills the Board of Governors who run it with his chosen nominees, and can remove and replace them at will. How much more "jurisdiction" do you want?
Re:The Fed Is Down by kemofo on Friday February 26, 2021 @09:08AM (#26274865)
The government has passed laws against insider trading, speeding, and murder, and I wouldn't say these things are "completely under the US government's control". The fed does what it wants, congress is powerless to stop it, even though there are pieces of paper with laws written on them.
Re:The Fed Is Down by smitty1e on Wednesday February 24, 2021 @05:00PM (#26256640)
>The Fed is a private entity actually.

The idea of the Federal Reserve urinates all over the Constitutional principle that people weilding power stand for election.

Doom on us for permitting such.

Re:The Fed Is Down by lrem on Wednesday February 24, 2021 @02:48PM (#26254716)
Don't touch if it isn't broken?

From what I've seen in other countries, you don't update protocols for this. You introduce better ones and kill the old ones once nobody used them for a while. Which might take longer than expected, because "free instant transfers" might be seen as cannibalizing the "slightly less slow expensive transfers" any given bank might have on offer.

Re:The Fed Is Down by xtracto on Wednesday February 24, 2021 @03:28PM (#26255348)
I deal with the ACH network on a daily basis and let me tell you it IS broken. The fact that you only receive negative ack when a transaction fails, otherwise you have to pray your transaction went through is so bad it sounds like a joke.

For comparison, the third world underdeveloped country where I live has an electronic cash transfer system allowing me to send ANY amount of money in 10 minutes at most for $0.5 usd.

Re:The Fed Is Down by throwaway20875 on Wednesday February 24, 2021 @03:53PM (#26255713)
I worked in fintech in NYC for a bit. The technology driving most critical financial infrastructure in the US is astoundingly antiquated. It is only sustained through the sheer amount of bodies and ingenuity thrown at it.
Re:The Fed Is Down by gruez on Wednesday February 24, 2021 @03:01PM (#26254954)
It's probably VPNed and/or FTP over TLS (aka FTPS).
Re:The Fed Is Down by xtracto on Wednesday February 24, 2021 @03:29PM (#26255362)
No, these things use SFTP which is mainly ssh over 22
Re:The Fed Is Down by gruez on Wednesday February 24, 2021 @03:41PM (#26255559)
anecdotal counter-evidence:

https://news.ycombinator.com/item?id=7647166

https://news.ycombinator.com/item?id=7638063

This is probably because people often conflate SFTP (ssh-based protocol) with FTPS (FTP over TLS) eg. royal bank which says "secure ftp" (which suggests SFTP), but also mentions SSL (which suggests FTPS).

https://www.rbcroyalbank.com/ach/cid-212563.html

Re:The Fed Is Down by avereveard on Wednesday February 24, 2021 @04:37PM (#26256382)
> FTP transfers of specially formatted files.

there's nothing wrong with that, at least it isn't fake-rest, and most other delivery technology are proprietary anyway.