Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Comment How could it tell? (Score 1) 51

"SUPPORT. HELP. HUMAN. OPERATOR. GET ME A FUCKING HUMAN BEING YOU GODDAMN PIECE OF SHIT! "

processing... processing... processing... anger detected 37% probability

(im not yelling slashdot im not yelling... ok i am but its on purpose let this post go through...)

Comment My bank security sucks (Score 1) 52

Why does my twitter account have better security than my BANK?! Bank of America only supports SMS authentication, and that is only to a long list of every phone number associated with my account. I cannot restrict it to just one phone number such as a Google Voice phone set up just for security. I asked a rep about Two-Factor-Authentication and she said "I never heard of that, what is it?"

It is mind boggling. My money has less protection that my throw away forum accounts.

Also, shout out to Vanguard, who has a "I FORGOT MY AUTHENTICATION DEVICE" link on the login page that allows me to skip using Google Authenticator if it's 'inconvenient'.

Comment USA Today article is garbage (Score 1) 201

While I'm not disagreeing that Bitcoin's halo is tarnished... The article says
> hitting its lowest level since September 2007
When Bitcoin's original description was in a whitepaper published in 2009. How lazy does a reporter have to be to not even check a Wikipedia page? How well researched is the rest of the article?

Comment No Debt = Bad Credit (Score 1) 336

I just got denied credit for a big purchase. On the rejection letter they listed the reasons I am not a good candidate: I paid off my mortgage in full and have no mortgage debt. I pay off my credit cards each month and carry no balance. We wouldn't want to let creeps like me into the country!

Comment Never let your 'Smart TV' on your network (Score 1) 77

It's simple. Just don't give your Smart TV your wi-fi password. Ever. The Smart functions are terrible implementations anyway. Plug in something you trust more, like a Plex box, an Amazon Fire Stick or a Chromestick and let your TV be a dumb device that just displays whatever video signal you feed it.

Samsung Smart TVs got caught *browsing your network shared folders and sending your filenames to a server in South Korea*. There is no possible legitimate excuse for that. Don't trust consumer electronics devices!

Personally, I'd never trust an Alexa or similar device either, but YMMV.

Comment Re:Curious (Score 1) 127

That is moronic!

Also, Vanguard has TOPT 2FA (Authy, Google Authenticator, etc), but on the page that asks you to enter your code there is a button 'I don't have my security device with me, send me an SMS instead'. This cannot be disabled. I am not making this up. I complained but the support rep couldn't understand why this is bad. She just kept asking if I wanted to turn off 2FA altogether.

Comment Re:Not really. What you get is ... not done (Score 1) 560

And salespeople. Don't forget salespeople. When I worked at a system integrator (custom code for various industries) we got a cool big document scanner. We made a *spreadsheet with hyperlinks* to (1) scan a new document, (2) view a document. A salesman saw it and within two weeks had sold our "industry leading document management system" to a big South American bank. We had less than a month to put something together and then we all got shipped to South America to install our industry leading system and train the techno-phobic bank staff on using our spreadsheet with hyperlinks.

Comment Re:Would using Rust have helped? (Score 1) 44

Programming language security had nothing to do with this hack. Someone called the phone company and pretended to be a clueless customer who was trying to port his phone to a new provider. Lazy phone company rep decided that even though the "clueless customer" didn't pass any of the security questions he would go ahead and port the phone away anyway 'to be helpful'. Now the hacker can receive all SMS messages that were supposed to go to the phone. He logs into Reddit's backend as the user and it sends a 2FactorAuthentication code to the user's phone. Which the hacker is now receiving.

Sending codes as an SMS to a phone is terrible security and everyone has known this for years. Bitcoin exchanges have been very publicly hacked this way enough that no exchange would even consider using SMS for security. I'm surprised Reddit, which has a very technical community, allowed this.

BTW my bank still ONLY offers SMS security :-(

Comment Re: Actual impact is what? (Score 1) 44

You have no idea what 'salted' passwords means, do you? It doesn't add the word 'SECRET' to every password or any other secret word. It adds a *different* random string to every password. This means rainbow tables are useless because the entire rainbow table would be specific to ONE user's password. It would be completely pointless to generate a rainbow table for ONE user instead of just a brute-force attack on that user, with or without a 'cluster of rented Amazon GPU servers'.

Slashdot Top Deals

Beware of Programmers who carry screwdrivers. -- Leonard Brandwein

Working...