![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://lemmy.ml/pictrs/image/d3d059e3-fa3d-45af-ac93-ac894beba378.png)
You actually want them to do this, it’s terrifying easy to set up a cell tower or call centre and convince banks and people you are customers or banks.
You actually want them to do this, it’s terrifying easy to set up a cell tower or call centre and convince banks and people you are customers or banks.
This is correct, i should have said “telephone banking password/passcode” but also the security questions are at best hash encrypted (so basically plain text). I had thousands of hours of call recording and millions of customer details on my work laptop all unencrypted. The security for enterprise telephony companies is seriously lax, I wouldn’t be surprised if a few unexplained leaks originated from these companies.
The company that provides your banks phone system has full access to pretty much every piece of information your bank holds on you, including call recordings, phone numbers, addresses, debts, credits, and your phone password. We can trick our own systems into thinking it’s you on the phone.
Avoid calling your bank at all costs, and if they call you say “no thank you I’ll do that online or in branch”, as soon as you pass security the phone system is accessing all your data. If possible go into branch or do everything on a banking app which has far better security.
That would be nice for iPhone, I’ve got a perfectly fine iPX that I’m only going to upgrade because my banking apps are going to drop support for iOS 16 soon
I may be completely wrong but don’t Samsung, Google etc. stop supporting OS updates on Android phones after 5-6 years? Apple have supported devices for 6-8 years AFAIK.
This is absolutely correct, let’s not forget how amazing the turnaround was in road network and car industry after Hitler came to power in 1933!
I had no idea why it had done this, but I figured I would just ignore it, and everything would be ok.
Emotional damage
I really thought they would wait a little longer after the Adblock crackdown. Oh well, Grayjay to the rescue!
Ah I see, yes app/web OTP is one of the best methods, unless people are calling to report the app/website not working (a workflow I’ve seen many times) The industry has put hundreds of millions into voice recognition but the sample size required for AI to trick voicerec is really low now.