@ainmosni@KimSJ@wakame@aral Apostrophes still fail frequently. I've just gotten in the habit of ignoring the apostrophe in my last name when inputting into a web form.
I find myself increasingly persuaded that this question needs to be filed in the dustbin. Anyone can go by any name they like, but presuming that a woman changes her name upon marriage is something we can afford to stop doing in a business setting. Harkens to a time when a married woman couldn't open an account without her husband's approval.
@aral
Chilean Banks aren't different, after taking my Id and scanning my fingerprints they asked me the "security questions"... Like yeah, sure I can fake an Id and fingers but boy, I sure can't know where I live.
@aral The worst is United airlines. They use questions like “what’s the fist car you owned” and “what did you want to be when you grow up”, but the answers are not free text. You’re only allowed to choose from a drop-down of about twenty canned answers! It’s just flabbergastingly insecure.
The reason for this is that your MMN is not only used as a security check between you and the bank, but also forms part of the identity they use to credit score you.
If you were to provide a different MMN to each bank, then you would have several disconnected credit records, one for each bank, and they wouldn't be able to score you.
Having written credit referencing software, that could be both a good thing and a bad thing depending on your finances.
@aral I think the best security questions are ones where you come up with both question and answer. It’s fairly easy to come up with ones with answers that just jump into your head but would never occur to anybody else.
@aral For me it was when they asked for my most recent bank statement from my current account with a different bank, which I provided, then they said “no your most recent one” and I said “yes, this is my most recent one, I get them every three months, this is the most recent one, here’s a screenshot of my bank’s website showing that this is my most recent one” and they said “call your bank and ask for the most recent one” and I said, again, “THIS IS MY MOST RECENT ONE”.
I’m pretty sure that BOI do their statments quarterly too so I don’t know why this was such a difficult concept for them.
@aral Ugh - clueless. All my security questions have nonsense answers, everywhere.
Surely the last thing one should do is use potentially publicly available info as a security password.
@aral a lot of banks are clueless. once I had a loan application with ING that required a lot of personal info (like passport copy, etc.), and they asked me to send it attached to an email. *narrator voice: I didn't send them attached to an email.
@gastonrampersad Oh gosh, no, please don’t say that. We’re going to start looking for a place to buy (because it’s going to be way cheaper than renting on a monthly basis… because capitalism) and I hope we won’t have to deal with them… argh! :)
@aral@nev you could've claimed it was a Pringnanoc name and pronounced "Lub" and threatened to sue them because of discrimination, that might have worked.
@aral Every organization that literally expects people to truthfully answer any of those questions when doing so isn't literally a legal requirement enforced upon said company should not be trusted at all!
@kkarhan Yeah, the only reason I wanted a credit card to begin with is because it makes renting a car easier in some places. No desire to have one. My debit card works perfectly fine for anything I need it for.
It amazes me, though, that this is a bank and they’re so clueless about security. (I mean, it doesn’t really, but, in a world that worked properly, it would.)
I wish I could go into detail about how f**ked up finance and payment providers are but that's covered with NDAs...
Granted most of it is just absurd #TechDebt and shitty tacked-on solutions like #3Dsecure and #PSD2 that never solved the core issues whilst bricking enough stuff that a complete redesign would've been more useful and economically...
What is the difference? If you have a debit card then the bank already has the same exact information they needed for the CC.
Plus, CCs are way safer and easier to deal with if you get a fraudulent charge (at least in the US). Actually, in Europe too. N26 only gave us our money back after we threatened to report them to the proper agencies. Before they told us to "borrow money from family" while they investigate for a month or two.
Honestly, this is a good reason not to use debit. It is the same bank and the shitty app is the same for credit or debit. But at least with credit they cannot wipe your bank account clean, whatever charges are made they will reverse before you have to pay it, and you can still pay your rent and buy food. I do not understand what you think makes a debit card any superior if the app/ online banking for either is exactly the same.
Most mobile payment apps are just bad and I don't want to be insulted by tech-illiterate cooperations actively preventing me from using a password manager when I still can only set a 4 digit pin in 2023...
Oh, I agree on the mobile apps being bad.... but I do not understand why it would be any better for a debit card. The 3 banks we had in Europe all required some kind of mobile app for buying online with the debit card. And CC and debit had the same process for buying in person (chip and pin). So I do not understand how using only debit will help you there.
@chris@aral Well, in Europe, Chip + Pin is the norm and contactless payments usually don't allow more than € 25 per transaction or €100 per day - whichever is lower...
Cash is just more normal in Germany and people like myself tend to literally buy cars with it.
So whilst big grocerers will allow you to check out with almost all CCs and Debit Cards [you may have issues with UnionPay, AliPay, DinersClub, AMEX, ApplePay and GooglePay / SamsungPay acceptance] most small kiosks will nope you.
We had our European debit card (chip and pin) skimmed in Europe, and it was a nightmare. The number was used in Russia in rapid succession in 20+ transaction, they wiped our bank account, and the bank was "uh... we do not know if this is fraud". The kick of it is that for US to use the card online an authorization via app was needed. But fuckers in Russia buying with strip readers a few hours after we made a purchase in France???Nah! That sounds legit!
It was just little stressful because we had other accounts, but I was thinking about people for whom this could be catastrophic... Like not able to pay rent or eating. They said it would take a month or more "to investigate"....
We did, with the help of Reddit, ironically (RIP). It was about 5k and for us not a big trouble, but for someone with only one account would have been for sure. We asked the bank and they said to "borrow money from family while they investigate...lol"
Someone on Reddit told us to cite European regulations X and Y and agency Z and surprise! We got the money back.
@FuckElon@chris@aral Yeah, that shit wouldn't fly in #Germany, as banks have to backroll fraudulent charges immediately upon report unless it's like months old...
That was Germany, though! N26 is a German bank. And sure, Reddit "solved" our problem but not everybody would know to go ask reddit or someone else knowledgeable of what to do and vulnerable people are the ones that least have this kind of time or resources to fight.
And that's why the #CSSF in #Luxembourg literally has people that solely deal with #PayPal and their actions, like holding customers at ransom...
I sincerely hope #Monero will become the predominant casless payment and that people use cash whereever they can't wait 6-8mins for a transaction to finalize...
@chris@aral The only things you can't do is buy real estate in cash or rent a car with cash, as both don't want to handle cash and car rental will likely prefer to pull the entire rent + deposit and then back-transfer the deposit after returning the car...
also banks here are extremely stingy in terms of loans and actual credit cards are sparse with low limits at best...
So if your CC doesn't support #3Dsecure, #PSD2 and Chip+Pin it may not work at all...
@chris@aral granted if someone were to ever snatch my wallet, I could just call 116117 in Germany and just get my cards locked faster than they could type the PIN...
It doesn't even obligate them to record-keep phone numbers or eMail adresses...
Also bs security questions like that not only violate the privacy of unaffiliated 3rd parties but also answering them honestly will make them useless as a means of authentification since at least the days of Mitnick...
Add comment