POV-Ray : Newsgroups : povray.off-topic : New bank trojan Server Time
5 Sep 2024 09:21:22 EDT (-0400)
  New bank trojan (Message 8 to 17 of 27)  
<<< Previous 7 Messages Goto Latest 10 Messages Next 10 Messages >>>
From: Darren New
Subject: Re: New bank trojan
Date: 5 Oct 2009 11:59:44
Message: <4aca17f0$1@news.povray.org>
Invisible wrote:
> Darren New wrote:
> 
>> German banks are smarter. The banks here were supposed to (by recent 
>> law) send out those fobs with the one-time digits on them. Instead 
>> they opted for a second password.  No! Two-factor authentication 
>> doesn't mean two passwords.
> 
> Epic fail.

Just a business decision. The banks are responsible for the money here. (I 
understand in Europe that if someone steals your bank card or credit card, 
you actually have to pay off the charges?)  It was cheaper to pay off the 
losses than to send out fobs to everyone.

-- 
   Darren New, San Diego CA, USA (PST)
   I ordered stamps from Zazzle that read "Place Stamp Here".


Post a reply to this message

From: scott
Subject: Re: New bank trojan
Date: 5 Oct 2009 12:00:18
Message: <4aca1812$1@news.povray.org>
>> I don't see how that would work for most German banks, as before a 
>> transaction is made you need to enter a special code from a use-once list 
>> that is provided from your bank.
>
> German banks are smarter. The banks here were supposed to (by recent law) 
> send out those fobs with the one-time digits on them.

I have a small gizmo for my UK bank, I put my normal ATM card into it, then 
type in a code provided by the website, then get given back a code that I 
enter into the website to authorise the transfer.

Both that system and the German system are a little inconvenient, because 
you always need to have something extra with you to make a transfer.  Still 
better than the inconvenience of not being able to buy anything because 
someone has stolen all your money :-)


Post a reply to this message

From: Darren New
Subject: Re: New bank trojan
Date: 5 Oct 2009 12:05:51
Message: <4aca195f$1@news.povray.org>
scott wrote:
> because you always need to have something extra with you to make a 
> transfer. 

That is precisely why it's called "two-factor authentication."  The problem 
with having only a password is that you don't know when it has been stolen. 
Hence the whole "change your password every 2 weeks" kind of thing.

-- 
   Darren New, San Diego CA, USA (PST)
   I ordered stamps from Zazzle that read "Place Stamp Here".


Post a reply to this message

From: Warp
Subject: Re: New bank trojan
Date: 5 Oct 2009 12:06:38
Message: <4aca198e@news.povray.org>
scott <sco### [at] scottcom> wrote:
> I don't see how that would work for most German banks, as before a 
> transaction is made you need to enter a special code from a use-once list 
> that is provided from your bank.

  Here not only that, but even if you used the online bank at a public
computer (you shouldn't, of course, but if) and even if for whatever reason
you forget to log out, the next user could see your bank details (how much
money you have, etc) but he wouldn't be able to transfer any money anywhere
without the code card.

-- 
                                                          - Warp


Post a reply to this message

From: scott
Subject: Re: New bank trojan
Date: 5 Oct 2009 12:09:34
Message: <4aca1a3e@news.povray.org>
> (I understand in Europe that if someone steals your bank card or credit 
> card, you actually have to pay off the charges?)

Never heard of that, it's happened to me a few times and I just phoned them 
up and told them it wasn't me.  Each time they just cancelled the amount and 
sent me a new card.  Credit card companies especially make plenty of money 
by charging people ridiculous interest rates if they don't pay off the 
balance, they can more than cover what they lose...


Post a reply to this message

From: scott
Subject: Re: New bank trojan
Date: 5 Oct 2009 12:20:43
Message: <4aca1cdb$1@news.povray.org>
>  Here not only that, but even if you used the online bank at a public
> computer (you shouldn't, of course, but if) and even if for whatever 
> reason
> you forget to log out, the next user could see your bank details (how much
> money you have, etc) but he wouldn't be able to transfer any money 
> anywhere
> without the code card.

Hehe, in Germany you can then just go to amanzon.de (or most other German 
websites) and use their bank account info to buy stuff.  It's unbelievable 
to me how that is possible, but it seems not many people abuse this system. 
Also once you have given your bank details to a 3rd party to take money from 
your account (eg a mobile phone contract) it is then impossible (AFAIK) to 
prevent them taking money (eg if you cancelled the contract).  In the UK at 
least you have to first authorise such agreements, and can cancel them at 
any time at the click of a button, which makes it impossible for them to 
take the money.


Post a reply to this message

From: Darren New
Subject: Re: New bank trojan
Date: 5 Oct 2009 12:52:45
Message: <4aca245d$1@news.povray.org>
scott wrote:
>> (I understand in Europe that if someone steals your bank card or 
>> credit card, you actually have to pay off the charges?)
> 
> Never heard of that, 

OK. I've heard it, so either things have changed or it's different in 
different countries.

-- 
   Darren New, San Diego CA, USA (PST)
   I ordered stamps from Zazzle that read "Place Stamp Here".


Post a reply to this message

From: Darren New
Subject: Re: New bank trojan
Date: 5 Oct 2009 12:54:13
Message: <4aca24b5$1@news.povray.org>
scott wrote:
> Also once you have given your bank details to a 3rd 
> party to take money from your account (eg a mobile phone contract) it is 
> then impossible (AFAIK) to prevent them taking money (eg if you 
> cancelled the contract).  

I think that's what I was talking about. People are very protective of their 
bank details, where in the US, you need to authorize the withdraw in writing.

-- 
   Darren New, San Diego CA, USA (PST)
   I ordered stamps from Zazzle that read "Place Stamp Here".


Post a reply to this message

From: Warp
Subject: Re: New bank trojan
Date: 5 Oct 2009 13:00:05
Message: <4aca2614@news.povray.org>
Darren New <dne### [at] sanrrcom> wrote:
> I think that's what I was talking about. People are very protective of their 
> bank details, where in the US, you need to authorize the withdraw in writing.

  I don't really understand why giving your bank details to someone would
be in any way dangerous. It's not like they could withdraw money by simply
knowing your account number.

-- 
                                                          - Warp


Post a reply to this message

From: Darren New
Subject: Re: New bank trojan
Date: 5 Oct 2009 15:34:05
Message: <4aca4a2d$1@news.povray.org>
Warp wrote:
> It's not like they could withdraw money by simply
> knowing your account number.

Well, here people are worried about identity theft. (I.e., the ability to 
illegally withdraw money without your permission.) I understand that in some 
countries the onus is on you to prove the withdraw was illegal.

I.e., in the USA, with a credit card, you have the choice of not paying the 
bill until the bank proves you really authorized that transfer. With a debit 
card, the money is gone and spent, and it's up to the individual to prove to 
the bank that the transfer was *not* authorized, which is a much harder 
thing to do, of course.  (Hence why I don't own a debit card. :-)

My info may be either out of date or restricted to a small subset of 
countries in Europe, or both.

-- 
   Darren New, San Diego CA, USA (PST)
   I ordered stamps from Zazzle that read "Place Stamp Here".


Post a reply to this message

<<< Previous 7 Messages Goto Latest 10 Messages Next 10 Messages >>>

Copyright 2003-2023 Persistence of Vision Raytracer Pty. Ltd.