Security expert Ben Laurie has a scorching indictment of the "Verified by Visa" program used by British banks. This system is basically the perfect system for phishers and identity thieves, and conditions honest people to behave in foolish ways that leave them vulnerable to having their life's saving taken off of them.
"Frame inline displays the VbV authentication page in
the merchant’s main window with the merchant’s
header. Therefore, VbV is seen as a natural part of the
purchase process. It is recommended that the top
frame include the merchant’s standard branding in a
short and concise manner and keep the cardholder
within the same look and feel of the checkout process."
Or, in other words: Please ensure that there is absolutely no way for your customer to know whether we are showing the form or you are. In fact, please train your customer to give their “Verified by Visa” password to anyone who asks for it.
Craziness. But it gets better - obviously not everyone is pre-enrolled in this stupid scheme, so they also allow for enrolment using the same inline scheme. Now the phishers have the opportunity to also get information that will allow them to identify themselves to the bank as you. Yes, Visa have provided a very nicely tailored and packaged identity theft scheme. But, best of all, rather like Chip and PIN, they push all blame for their failures on to the customer
More Banking Stupidity: Phished by Visa
The Boeing 737 Max is out of service around the world, following a fatal crash of an Ethiopian Airlines and an Indonesian Lion Air flight and there is intense investigation and speculation as to the cause of the crash.
Ontario, Canada’s Workplace Safety and Insurance Board created these splatterpunk workplace safety ads in 2012. “This is not a feel-good campaign,” said WSIB Chair Steven Mahoney. “We’ll feel good when the number of injuries and fatalities go down.”
One of my fears is opening my car door just as a cyclist is coming by, causing a dangerous collision. I always look before I open, but I’m going to start opening the door with a “Dutch Reach” as an added precaution. It’s simple to do: open the door with your right hand, which forces […]
Seasoned chefs have a bit of a love-hate relationship with their cutlery. A really good set of knives has to prove its worth by being put through the wringer – and if they’re really good, they’ll still look great afterward. So it is with the Damasukasu Japanese 3-Piece Master Chef Hanshu Knife Set. Sitting in […]
With the intuitive software out there today, anyone can become a music producer. You’ve probably heard that from any number of laptop impresarios, but you still have to know how to use the tools – and Logic Pro X is one of the best platforms out there right now. In order to get the most […]
Believe it or not, PDF files have been the go-to format for contracts and forms of any type since 1993. And sure, they’re easily shareable – but that’s about it. When you need to edit or sign a document – and you will – that’s when frustration can set in. Luckily, there are workarounds, and […]