[-] Aceticon@lemmy.dbzer0.com 1 points 1 week ago* (last edited 1 week ago)

Well, I haven't really made any large wire transfers to accounts outside the EU from that bank in over a decade so can't really confirm or deny.

I do know that in past experience with banks in general, the people checking the validity of suspicious transations (and large transfers to accounts outside the EU tend to fall into that classification given the prevalence of online scams from countries were the Law is a bit of a joke) will actually call you, or at least they did in the UK some years ago (pre-Brexit) which was the last time I had experience with something like that.

(At one point I also worked in a company that made Fraud Detection software).

Maybe they switched to SMS to save money, I don't know.

[-] Aceticon@lemmy.dbzer0.com 1 points 1 week ago* (last edited 1 week ago)

Ah, I see.

Your point is that the use of a secondary channel for a One Time Pass is still an insecure method versus the use of a time-based one time password (for example as generated in a mobile phone app or, even more secure, a dedicated device). Well, I did point out all the way back in my first post that SMS over GSM is insecure and SMS over GSM seems to be the secondary channel that all banks out there chose for their 2FA implementation.

So yeah, I agree with that.

Still, as I pointed out, challenge-response with smartchip signature is even safer (way harder to derive the key and the process can actually require the user to input elements that get added to the input challenge, such as the amount being paid on a transfer, so that the smartchip signs the whole thing and it all gets validated on the other side, which you can't do with TOTP). Also as I said, from my experience with my bank in The Netherlands, a bank using that system doesn't require 2FA, so clearly there is a bit more to the Revised Payment Systems Directive than a blanked requirement for dynamic linking.

[-] Aceticon@lemmy.dbzer0.com 6 points 1 week ago

I literally said 2FA over SMS is not secure because of weaknesses in the GSM protocol.

It's still more secure than username + password alone, but that's it.

[-] Aceticon@lemmy.dbzer0.com 2 points 1 week ago* (last edited 1 week ago)

Whilst I would be wary of saying AirBnB is the main cause (more likely it's a big one but not the only one), keep in mind that when realestate prices go up in major cities, that pushes out people who go to cheaper places, pushing prices up in those places which in turn might push some out from those places and into even cheaper places.

So housing bubbles centered in main cities do naturally spread out from there to places were the original causes of the bubble are not present.

[-] Aceticon@lemmy.dbzer0.com 10 points 1 week ago* (last edited 1 week ago)

Those little boxes are just a bit of hardware to let the smartchip on the smartcard do what's called challenge-response authentication (in simple terms: get big long number, encode it with the key inside the smartchip, send encoded number out).

(Note that there are variants of the process were things like the amount of a transfer is added by the user to the input "big long number").

That mechanism is the safest authentication method of all because the authentication key inside the smartchip in the bank card never leaves it and even the user PIN never gets provided to anything but that smartchip.

That means it can't be eavesdropped over the network, nor can it be captured in the user's PC (for example by a keylogger), so even people who execute files received on their e-mails or install any random software from the Internet on their PCs are safe from having their bank account authentication data captured by an attacker.

The far more common ~~two-way-authentication~~ edit: two-channel-authentication, aka two-factor-autentication (log in with a password, then get a number via SMS and enter it on the website to finalize authentication), whilst more secure that just username+password isn't anywhere as safe as the method described above since GSM has security weaknesses and there are ways to redirected SMS messages to other devices.

(Source: amongst other things I worked in Smart Card Issuance software some years ago).

It's funny that the original poster of this thread actually refuses to work with some banks because of them having the best and most secure bank access authentication in the industry, as it's slightly inconvenient. Just another example of how, as it's said in that domain, "users are the weakest link in IT Security".

[-] Aceticon@lemmy.dbzer0.com 4 points 1 week ago

The most defining trait of Sociopaths and Psychopaths is having no empathy, so for people like this the suffering of others, be it of their own making or not, has about as much emotional impact as the "suffering" of a leaf of lettuce when they eat it or of a piece of paper they crumple and thrown in the trashcan.

This also means that, amongst other things, they feel no guilt whatsoever (would you feel guilt from eating a leaf of lettuce?!) and will sleep like babies with the blood of thousands on their hands.

[-] Aceticon@lemmy.dbzer0.com 7 points 1 week ago* (last edited 1 week ago)

In my own Portugal, which is a very turistic country and also towards the bottom of the GDP-per-capita scale in the EU, things that would likely work very well would also be:

  • Crack down on AirBnB
  • Forbid ownership for non-residents.

Portugal currently has a massive house inflation problem (extra massive, because of how low average incomes are here) and a lot of it has to do with residential housing being removed from the housing market and turned into short term turist lets (for example, over 10% of housing in Lisbon has been turned into AirBnB lets) and foreign investors (not just big companies but also individuals, such as well off pensioneers from places like France) pulling prices up by being far less price sensitive than the locals as they're buying residential housing as investments having far more money available than the average Portuguese.

Having lived in both Britain and Portugal during housing bubbles, what I've observed was that the politicians themselves purposefully inflate those bubbles, partly because they themselves are part of the upper middle class or even above (especially in the UK) who can afford to and have Realestate "investments" and hence stand to gain personally (as do their mates) from Realestate prices going up and partly because the way Official GDP (which is supposedly the Real GDP, which has Inflation effects removed) is calculated nowadays means that house price inflation appears as GDP "growth" since the effects of house price increases come in via the "inputted rent" mechanism but the Inflation Indexes used to create that GDP do not include house price inflation, so by sacrificing the lives of many if not most people in the country (especially the young, for example the average age for them to leave their parent's home in Portugal is now above 34 years old and at this point half of all University graduates leave the country as soon as they graduate) they both enrich themselves and can harp in the news all about how they made the GDP go up.

All this has knock on effects on the rest of the Economy, from the braindrain as highly educated young adults leave and the even faster population aging as people can't afford to have kids, to shops closing because most people have less money left over after paying rent or mortgage so spend less, plus the commercial realestate market is also in a bubble so shops too suffer from higher rents. However all this is slow to fully manifest itself plus those who bought their houses before when they were cheaper don't feel directly like the rest, and they generally don't really mentally link the more visible effects (such as more and more empty storefronts) to realestate inflation, much less do more complex analysis of predictable effects, such as how the braindrain and fall in birthrates will impact their pensions in a decade or two.

[-] Aceticon@lemmy.dbzer0.com 8 points 1 week ago

As somebody who was an EU immigrant in the UK for over a decade and also lived in other countries of Europe, lets just say that New Labour are plain Rightwing (so, not even Center-Left, although the original Labour definitelly were Leftwing) and the Liberal Democrats are pure rightwing (whislt the Tories have been Far Right since at least the Leave Referendum).

The ideology of "Thatcher's Greatest Achievement" - a "relaxed about wealth" ideology which loves privatisation and derregulation - which took over Labour is not Left of center and the LibDems have always been even more Neolibs than that.

The Overtoon Window in England (not as much the other UK nations) is way to the Right of the rest of Europe, so its understandable that many there think that when they neither grew up back in the days when Labour was actually a party of the Working Class and never saw politics elsewhere in Europe.

[-] Aceticon@lemmy.dbzer0.com 6 points 1 week ago

At a Systemic level hey're big fans of the only true Power being Money whilst the Vote is nothing more than a bit of loud Theatre & Clown Show that doesn't actually control the managing of a country - or in other words, of Oligarchy rather than Democracy.

At a personal level they're big fans of personal upside maximization with no legal, ethical or moral limits, aka Greed Is Good, or in other words, for sociopathy to be totally legal, socially aceptable and even celebrated.

[-] Aceticon@lemmy.dbzer0.com 5 points 1 week ago

That's a whole different kind of "special".

[-] Aceticon@lemmy.dbzer0.com 11 points 1 week ago

They eventually gave up on it.

[-] Aceticon@lemmy.dbzer0.com 45 points 1 week ago* (last edited 1 week ago)

Remember how the !world@lemmy.world mods kept pushing for months the propaganda bot from a pro-Zionist and very rightwing (so much so that their definition of a Rightwing news media was pretty much only the Far-Right ones) organisation trying to tell everybody which news to trust and which to not trust?

Also, curiously and back some months ago when I was making anti-Zionist posts in my Lemmy.world account, all of a sudden I started getting e-mails on the account I used to register on Lemmy.world from an Israeli organisation doing "Education about Israel" courses and they knew not just my e-mail but also the country I lived in (the e-mails were in my native language) even though I didn't share my email on any posts.

view more: ‹ prev next ›

Aceticon

joined 1 week ago