Security expert Ben Laurie has a scorching indictment of the "Verified by Visa" program used by British banks. This system is basically the perfect system for phishers and identity thieves, and conditions honest people to behave in foolish ways that leave them vulnerable to having their life's saving taken off of them.
"Frame inline displays the VbV authentication page in
the merchant’s main window with the merchant’s
header. Therefore, VbV is seen as a natural part of the
purchase process. It is recommended that the top
frame include the merchant’s standard branding in a
short and concise manner and keep the cardholder
within the same look and feel of the checkout process."
Or, in other words: Please ensure that there is absolutely no way for your customer to know whether we are showing the form or you are. In fact, please train your customer to give their “Verified by Visa” password to anyone who asks for it.
Craziness. But it gets better - obviously not everyone is pre-enrolled in this stupid scheme, so they also allow for enrolment using the same inline scheme. Now the phishers have the opportunity to also get information that will allow them to identify themselves to the bank as you. Yes, Visa have provided a very nicely tailored and packaged identity theft scheme. But, best of all, rather like Chip and PIN, they push all blame for their failures on to the customer
More Banking Stupidity: Phished by Visa
Elon Musk’s electric car company plans to reopen its one and only factory in the United States as soon as Friday, for ‘limited operations,’ in a county where coronavirus lockdown is ongoing.
On Saturday, the government health ministry of Canada reported the first presumed case in Canada of a patient with the so-called Wuhan virus, officially known as Novel Coronavirus 2019-nCoV.
Petition demands recall of 500,000+ cars over alleged defect Electric car maker Tesla said on Monday there was no unintended acceleration in its vehicles, as petition signature-gatherers demanding a federal safety investigation have claimed.
We’ve all dealt with paint cans — and keeping all those metal buckets full of sloshing paint from turning into a giant mess is pretty close to impossible. But you stand a better chance of finishing your project without the entire room looking like a Jackson Pollock painting with the help of the ingeniously simple […]
If you ever dropped a quarter into a Space Invaders game, you’ve likely fantasized about having your own arcade cabinet in your house. Of course, you likely thought better of it for several reasons, including the idea that a giant cabinet dedicated to just one game isn’t very practical. Polycade understands the urge though very, […]
Most of us have a love-hate relationship with banks. Okay, it’s actually probably more like a tolerate-hate relationship. We understand their role in holding and securing our money so we don’t have to stuff it in a mattress somewhere. But we don’t trust the bank not to gouge us on fees whenever they can. And […]