Re:Potential Weaponizing of Honeypot Logs
by NikkiA on Saturday September 02, 2023 @10:17AM
(#37361743)
My bank dropped using passwords back in july.
Now all that protects my account is a 5 digit PIN and SMS, and you can reset the pin via SMS.
I'm glad financial companies hire security minded folks.
Re:Potential Weaponizing of Honeypot Logs
by MattPalmer1086 on Saturday September 02, 2023 @10:36AM
(#37361892)
Well, technically a PIN is a kind of low security password...
Re:Potential Weaponizing of Honeypot Logs
by jowea on Saturday September 02, 2023 @08:01PM
(#37366531)
I suspect that what's supposed to be going on there is that what protects your account is law enforcement and the fact that financial transactions are traceable.
Re:Potential Weaponizing of Honeypot Logs
by NoZebra120vClip on Sunday September 03, 2023 @07:30AM
(#37369535)
Yeah, her bank has stationed a cop to stand at every website login and proactively arrest hackers before they can get at her money.
Re:Potential Weaponizing of Honeypot Logs
by jowea on Sunday September 03, 2023 @10:21AM
(#37370662)
I meant get the money back after the fact. Which yeah it will probably suck for the client even if the bank considers it a cost of doing business.
While they are not brilliant at anything, they are good enough on many dimensions. Some disadvantages of the things you mention are:
* They don't require specialised hardware * They don't require complicated recovery mechanisms if that hardware is lost, stolen or broken. * Arguably, biometrics should not be used for authentication. Once a biometric system is compromised, you have no way to recover. You can't change your biometrics.