Conversation

Never trust someone who thinks banking is the pinnacle example of application where security matters. It's about the lowest possible.

Quote Tweet

matt blaze

@mattblaze

Jan 31, 2021

Replying to @mattblaze and @tn5421

The short answer is bank transactions are a much simpler problem than voting. They’re reversible, non-anonymous, and have trusted parties to provide indemnification. And fraud happens quite regularly; the costs are built into transaction fees. None of that is true for voting.

Replying to

*calls bank* operator: okay, to verify it's you could you tell me the first few letters of your password?

Replying to

and

also: you will need to set 2 security pins, one for X, which is 4 digits long, and one for Y, which is 5 digits long. if you don't want to set two different codes, you can just reuse the code fr X and add a 0 at the end.

Replying to

and

I almost flipped at that one, I *guarantee* you a bunch of people took that advice, especially older people

Replying to

Well yeah, but my point was just that the requirements are very low. Resource protected is fungible and insurable/replacable and cost of fraud can just be built in.

Replying to

and

Contrast with problem domains where it's someone's life, psychological wellbeing, medical care, ability to obtain employment, irreplaceable data set, etc. on the line.

Replying to

and

Financial transaction history is very personal information and a part of those things. People probably have a much higher expectation of privacy and security for it than what they actually get from banks and financial services. It's barely protected. They sell it to 3rd parties.

8:21 AM · Jan 31, 2021Twitter Web App

Replying to

and

Indeed that's already being sold.