Forget about emails, this seems like it applies to banks directly (in Canada at least).
Re:The Screwed-O-Meter
by worthless-trash on Sunday July 30, 2023 @09:36PM
(#36937926)
Aren't all vulnerabilities zerodays and therefore unpatched at some point?
known vs. unknown, and all that
Re:The Screwed-O-Meter
by lcnPylGDnU4H9OF on Sunday July 30, 2023 @09:57PM
(#36938029)
It’s a zero-day only at the point when it’s been exploited without having been reported. “Zero” is referring to the number of days since disclosure that an exploit ocurred. If it’s patched before it’s exploited, it wouldn’t be considered a “zero-day exploit”.
or if it's been reported but not acted on, and gets exploited before that happens.
Re:The Screwed-O-Meter
by lcnPylGDnU4H9OF on Monday July 31, 2023 @08:12PM
(#36950663)
I believe if, say, 10 days had passed since the report, it would be called a “10-day” exploit. But it’s also security research jargon that I’m not familiar with in a practical sense so I may be wrong.
Re:The Screwed-O-Meter
by stevenwliao on Wednesday August 02, 2023 @09:05PM
(#36980043)
I guess to be more specific, zero-days that they don't fix even after they're exploited.
Add additional checkboxes:
- [y/n] Is SMS the only 2FA method available?
- [y/n] Is there no 2FA at all?
- [y/n] Do they have a history of unpatched zero-days?
- [y/n] Is it possible that if there is a security breach, you won't hear about it because no tech journalist pays attention to this service?
- [y/n] Can someone socially engineer the support team to get access to your account?
- [y/n] If a hacker gets access to your account, can your bank accounts be drained?