Re:Apple, Google and Microsoft Commit to Expanded Support fo...
by londons_explore on Thursday May 05, 2022 @10:58AM
(#31274205)
> they also take security seriously,
Despite what most people think, banks are often a really long way behind on security. Banks don't care about security of any individual customer, merely security of the bank as a whole. That means if 0.01% of customers lose all their funds due to credential stuffing, it isn't an issue - the bank will just refund them if needed.
Unlike say ssh with key authentication, where it would be a total failure if 0.01% of attackers were allowed to login without the key.
Despite what most people think, banks are often a really long way behind on security. Banks don't care about security of any individual customer, merely security of the bank as a whole. That means if 0.01% of customers lose all their funds due to credential stuffing, it isn't an issue - the bank will just refund them if needed.
Unlike say ssh with key authentication, where it would be a total failure if 0.01% of attackers were allowed to login without the key.