Conversation
Jonathan Corbet
corbet
I'm currently dealing with a contractor to replace the gas furnace with a heat pump and actually use all that power that the rooftop panels are generating rather than burning gas. So far so good.
Today I got an email from a third-party site I'd never heard of with an invoice. To actually pay the invoice, the thing demands my login credentials for access to my bank account.
The contractor seemed surprised that I proved unwilling to do that. I guess I understand why phishing is such a lucrative exercise.
Today I got an email from a third-party site I'd never heard of with an invoice. To actually pay the invoice, the thing demands my login credentials for access to my bank account.
The contractor seemed surprised that I proved unwilling to do that. I guess I understand why phishing is such a lucrative exercise.
2
5
18
Michael K Johnson
mcdanlj@social.makerforums.info@corbet My credit union's new bill pay system wants me to do login credential sharing.
Their CTO actually responded to me when I complained, and essentially told me they they couldn't afford the good bill pay platform any more and this was all they could offer.
So all the bills that want credential sharing I'm now entering information manually.
The credit union have otherwise been good, so I haven't abandoned ship, but wow the bar seems to be low for software in the financial sector.
0
0
1
@vbabka The thing is, of course, that giving your credit card info over the phone is a pretty safe thing to do in the US. Having people go nuts with it is an obnoxious event on a par with realizing that your puppy has just made a mess on the floor ... you're going to spend a while cleaning things up, but there will be no lasting consequences. Experience says that cleaning up the mess in Europe is not as easy.
OTOH giving some random business — and everybody they leak data to — complete access to all of your accounts at a given institution, all of the transactions you have made there, your bill-paying setup, and more ... *that* could have consequences.
OTOH giving some random business — and everybody they leak data to — complete access to all of your accounts at a given institution, all of the transactions you have made there, your bill-paying setup, and more ... *that* could have consequences.
1
0
2
