News for hackers. Stuff that matters.
Re:My Bank Keeps on Undermining Anti-Phishing Education by diggan on Thursday July 17, 2025 @11:19AM (#44594326)
Yeah, I think they don't have any people working on the full UX flow, my bank does similarly weird stuff.

The example that comes into mind is making transfers to my wife, where every time I do it, they ask me to confirm a bunch of questions to make sure it's not a scam/fraud, which fine, good idea. Once I confirm, they display another notice telling me they won't ask for a confirmation/2FA code because I make transfers to that account so frequently.

The only reason I can come up with why it is like that, is because there isn't a single person/group responsible for the full experience.

Re:My Bank Keeps on Undermining Anti-Phishing Education by x0x0 on Thursday July 17, 2025 @11:22AM (#44594362)
The idiots at my former credit union apparently subcontract out their credit cards to some east coast bank, whereas my bank and I live on the west coast.

I saw some bank from Florida, that I'd never heard of, calling me on my cell. I assumed it was some sort of scam and ignored it. They're too stupid to get a phone number which has caller id set up to read the name of credit union with whom I did business.

Just amazing.

Re:My Bank Keeps on Undermining Anti-Phishing Education by Gunax on Thursday July 17, 2025 @01:12PM (#44595594)
Well, afaik caller id is actually unauthenticated and can be trivially impersonated.
Re:My Bank Keeps on Undermining Anti-Phishing Education by marcandre on Thursday July 17, 2025 @01:32PM (#44595848)
You are missing the point. He (hopefully) won't trust the callerID to be the bank, but he will trust a "random" callerID to not be his bank/important.
Re:My Bank Keeps on Undermining Anti-Phishing Education by godelski on Thursday July 17, 2025 @01:25PM (#44595764)

  > I think they don't have any people working on the full UX flow
Probably right, but this is the importance of dogfooding. I really think this stuff happens because everyone is in such a rush and doesn't take a few minutes to think things though, which requires thinking about everything as a whole.