Conversation

Notices

1. Embed this notice
   I AM BANKSY ☕ / 🗑‍🔥 (xinit@mastodon.coffee)'s status on Saturday, 03-May-2025 21:36:38 JST I AM BANKSY ☕ / 🗑‍🔥

   • Terence Eden
   • Extreme Electronics

   @Extelec @Edent The trouble here is that it's a legitimate popup from the legitimate bank initiated by a legitimate bank employee.

   I'm not sure how I'd improve this, but I think banking apps should kill this verification approach.

   • Steve's Place repeated this.
   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Saturday, 03-May-2025 21:36:36 JST Rich Felker

     in reply to

     • Terence Eden
     • Extreme Electronics

     @xinit @Extelec @Edent This pattern of 2FA is an inherent vulnerability and always unacceptable.

     It's impossible to distinguish from a scam, so it's a scam.

     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Goose of Dubious Value (sahqon@beige.party)'s status on Sunday, 04-May-2025 04:37:44 JST Goose of Dubious Value

     in reply to

     • Terence Eden
     • Extreme Electronics

     @xinit @Extelec @Edent The only reliable way of dealing with any scam is to put the damn phone down and then call up the number (from your own list or from looking up their website or whatever's on your papers) of whoever they pretended to be. Companies need to stop calling people and asking for details and so conditioning everybody to just accept that incoming calls are legit.

   • Embed this notice
     Jacob Atzen (jacobat@mastodon.social)'s status on Sunday, 04-May-2025 04:51:45 JST Jacob Atzen

     in reply to

     • Terence Eden
     • Extreme Electronics

     @xinit @Extelec @Edent You never trust anyone calling you. If your bank calls, you ask for a name, hang up and call your bank.