Security expert Ben Laurie has a scorching indictment of the "Verified by Visa" program used by British banks. This system is basically the perfect system for phishers and identity thieves, and conditions honest people to behave in foolish ways that leave them vulnerable to having their life's saving taken off of them.
"Frame inline displays the VbV authentication page in
the merchant’s main window with the merchant’s
header. Therefore, VbV is seen as a natural part of the
purchase process. It is recommended that the top
frame include the merchant’s standard branding in a
short and concise manner and keep the cardholder
within the same look and feel of the checkout process."
Or, in other words: Please ensure that there is absolutely no way for your customer to know whether we are showing the form or you are. In fact, please train your customer to give their “Verified by Visa” password to anyone who asks for it.
Craziness. But it gets better - obviously not everyone is pre-enrolled in this stupid scheme, so they also allow for enrolment using the same inline scheme. Now the phishers have the opportunity to also get information that will allow them to identify themselves to the bank as you. Yes, Visa have provided a very nicely tailored and packaged identity theft scheme. But, best of all, rather like Chip and PIN, they push all blame for their failures on to the customer
More Banking Stupidity: Phished by Visa
Women wearing seatbelts are 73% more likely to be killed or seriously injured in a car crash than men in seatbelts, and while it's not entirely certain why this is, it's a pretty good bet that sampling bias in crash-testing is to blame.
Boeing must address the issue before grounded jets fly again.
When federal prosecutors drag corporations into court for business practices that hurt or even kill people, it's routine for corporate counsel to ask to have the evidence in the case sealed, and for prosecutors to agree, and for judges to rubberstamp the deal, meaning that the public never finds out about the risks around them.
If you suffer from sleep disorders, there are a number of methods out there to mitigate them: Ambient noisemakers, relaxation tapes, sleep masks, you name it. One thing that doesn’t get tried is headphones, for good reason. Even the smallest earbuds are liable to wake you up if you roll over the wrong way. Now […]
Looking to upgrade that old laptop or tablet? Holiday sales may be way on the horizon, but there’s an even better way to get like-new tech for a steal. Here are 10 of our favorite deals on personal computers and gaming gear – refurbished, renewed or brand new. Acer Touchscreen 11′ Chromebook 16GB (Certified Refurbished) […]
Vape technology has been around long enough that vapers are starting to get picky about their gear. Luckily, so are we. From disposable models to cutting-edge touchscreen atomizers, there’s a vaporizer in this roundup to suit every taste. Hera 2 – World’s Most Advanced Dual-Use Vaporizer Choose between dry herb or oil extraction modes – […]