CyberThijs
https://htmlpreview.github.io/?https://github.com/SimonSchic...
The itsme app works totally fine for me, and my less tech-literate family members. It strikes a good balance in UX and security.
All in all, I think that the Belgian government is doing a good job in this. It needs to work well for the average user, which it does! I don't expect my government to spend time and money to support all fringe cases like smartphones that don't run iOS or Android.
The fine is also based on the revenue of the parent company. Say that Nest would be fined, then the revenue of Alphabet Inc. would be used as a reference point! A good enough incentive to make sure that all parts of your operations are covered :-)
For example: say that LinkedIn was to experience a new data breach, and they fail to inform the authorities or their customers in time, then they can be fined for up to 120 million USD (based on a revenue of 5 billion USD)!
I'm surprised that it's so little known here, as the impact will be massive.
[1] https://en.wikipedia.org/wiki/General_Data_Protection_Regula...
It works as follows:
- Merchant redirects me to his payment provider
- I enter my debit/credit card number into the payment provider screen
- I am redirected to my bank website, and am able to verify the URL (no iframes anymore!)
- My bank has two methods of verification: scanning a QR-code with the mobile banking app on my phone, or logging into the online banking website (with a Vasco DIGIPASS 836, which requires a debit card+pin to generate a OTP)
- I verify the amount and creditor in the mobile/online banking app, and sign the transaction with my mobile pin/digipass.
- I am redirected back to the merchant.
All in all, I think it costs me 30 seconds to complete the extra 3D-Secure steps when using my mobile banking app.
I've been looking for an aggregator that does this for a long time, but still haven't found it.