774 reputation
1020
bio website
location
age
visits member for 2 years, 8 months
seen Sep 14 at 5:40

Apr
28
accepted Implementing 2-step verification via email for web apps?
Apr
28
accepted Can key files be brute-forced like passwords?
Apr
27
asked Can key files be brute-forced like passwords?
Apr
27
comment Bank account number and account holder in check exposed?
I agree that this system somewhat works but sometime ago my Paypal was hacked simply because the attacker knew my bank account and a bunch of other personal details. He never knew my password but he pretended to be me and called/emailed Paypal. Even though Paypal never revealed how the hacker got in, I suspect Paypal verified his calls and the attacker presented valid information and that includes my bank account. Lesson learned here is keep your bank account secret or at least use a different bank account for Paypal.
Apr
27
comment Bank account number and account holder in check exposed?
@Ramhound Sometime ago, my Paypal account was hacked because my name and my bank account was known by someone else pretending to be me. He made a call/emailed Paypal pretending to be me, that's how he got in. I was able to reverse everything but still it caused me time and money. That's why I think bank accounts are very sensitive information.
Apr
27
awarded  Commentator
Apr
27
comment Bank account number and account holder in check exposed?
@DavidSchwartz That would really be nice to have.
Apr
27
comment Implementing 2-step verification via email for web apps?
I see. You are right email will be a different channel. Do you have any suggestions on how we can protect sensitive emails which contain verification codes and passwords?
Apr
26
comment Implementing 2-step verification via email for web apps?
So you mean to say even I install SSL for the whole site, an eavesdropper can still intercept it? Or only to certain users using public WIFI? BTW what do you mean "CA"?
Apr
24
comment Bank account number and account holder in check exposed?
@FiascoLabs Yes that would best practices, just like using different passwords in your Email and your Facebook/Stackexchange/Etc. It will prevent a signature copier from stealing all your bank accounts since they're all different signatures.
Apr
24
comment Bank account number and account holder in check exposed?
@FiascoLabs As mentioned there are some checks that has printed name of the holder by default. I think that's unnecessary. Actually even the account holder's signature is a security risk if it's the same signature you use with another savings account (one that's not meant for issuing checks, usually with a lot more money on it). IMO you should have two different signatures for checking account (public) and savings account (only you and banker knows).
Apr
24
awarded  Supporter
Apr
24
awarded  Scholar
Apr
24
accepted Why do DDoS attacks cost a fortune to stop?
Apr
24
comment Bank account number and account holder in check exposed?
@Ramhound You are right. So I guess it's safe to say the whole banking system is up for a revamp.
Apr
24
comment Bank account number and account holder in check exposed?
@ewanm89 You are right but those who are willing to share their account numbers on letterheads probably know the risks involve. However the average person doesn't. The check is a piece of paper that can be lost in the street with your name and account number on it. And you have no other way to protect it when a phisher picks it up and decides to get creative on the information he gained. Clearly this a banking authentication failure.
Apr
24
awarded  Editor
Apr
24
revised Bank account number and account holder in check exposed?
added 4 characters in body
Apr
24
comment Bank account number and account holder in check exposed?
I do not see any need for 100% manual processing since it involves computers no matter what. I also do not think hashing (or encryption) will add any significant load since it will only compare hashes between your check and what's already stored on the bank's server. I think it is a good way to hide the original account number and account holder from plain sight. I believe this convenience of printing the information blatantly can lead to identify theft/phishing.
Apr
24
comment Bank account number and account holder in check exposed?
@ewanm89 - some of the comments here raise valid points specially phishing linkedin.com/answers/finance-accounting/financial-regulation/…