• whoisearth@lemmy.ca
    link
    fedilink
    arrow-up
    7
    arrow-down
    2
    ·
    edit-2
    18 hours ago

    I’ll use banks as an example

    If they cared about your security there would not be a mobile app or website.

    Hell, credit cards would still require a signature.

    It’s about cost first and foremost and then convenience.

    Has nothing about you as a consumer. They don’t give 2 shits about you as a consumer.

    • throwback3090@lemmy.nz
      link
      fedilink
      English
      arrow-up
      7
      ·
      21 hours ago

      I mean you’re right about banks but your examples make no sense.

      Banks generally don’t support 2fa, which is bad. Some banks (fidelity) still have character limits on passwords because they stores it in plaintext until recently so you could use it through the telephone system. They could implement a secure tap to pay system on your phones with enhanced security, rather than relying on Google to handle their job. And for credit cards themselves, switch to chip and pin.

      “Banks don’t have mobile apps”?? “Signatures are secure”???🤡

      • whoisearth@lemmy.ca
        link
        fedilink
        arrow-up
        1
        ·
        18 hours ago

        How easy is it to fake a signature for a normal person who has not practiced a person’s signature for the intent purpose of faking it? Have you ever tried faking your parents signature to get out of school? I have.

        Now the infrastructure required to adequately check signatures is not practical hence it doesn’t exist. It’s why we moved to pins. Pins are small and 2fa doesn’t exist for banks because again it’s about the bare minimum and they are out to make money and don’t care about customers plus there’s government safeguards in place specific to banking.

        I will continue to argue that going back in time signatures are infinitely more secure than a 4 digit pin let alone tap but we have traded security for convenience.

        Anyways full admit that I’m batshit crazy.

        • candybrie@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          16 hours ago

          Have you ever tried faking your parents signature to get out of school? I have

          Yeah. I’ve been able to do it since I was 10. It’s really easy. I can also fake my husband’s and siblings’. It’s also a pain in the ass to change your signature. So if someone learns to copy it (like say based on the signature that was literally required to be on the card), it’s much hard to change it compared to a pin (which should definitely not be written on the card).

    • candybrie@lemmy.world
      link
      fedilink
      arrow-up
      13
      ·
      1 day ago

      Do you think signatures were at all secure? If they cared about security they’d do chip+pin like most civilized countries.

      • whoisearth@lemmy.ca
        link
        fedilink
        arrow-up
        1
        ·
        18 hours ago

        With proper infrastructure yes signatures are extremely secure. But that proper infrastructure doesn’t exist.

        • candybrie@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          edit-2
          16 hours ago

          I struggle to think of what that extremely secure infrastructure would look like. Are you imagining signing on an electric terminal and having a computer compare signatures at the time of sale? That seems like the most secure and still wildly insecure compared to a pin.