undefined | Better HN

0 pointsvkou3y ago0 comments

>ever put such a critical item as banking app on their phone?

Because my PC isn't meaningfully more secure.

Because in the overwhelming majority of situations, if that security is compromised, my bank will eventually cough up my money.

Also because I also expect neither Google, Apple, my carrier, nor the dab gum gubment is likely to rob me by...

*checks notes*

Compromising the banking app on my phone. Or my PC. Or my router. Or any of the other non-100% secure devices and processes I use to get through my life.

There's basic security precautions, and there's living in fear and paranoia, brought on by a misunderstanding of the threats you are facing.

0 comments

5 comments · 3 top-level

autoexec3y ago· 2 in thread

> Compromising the banking app on my phone. Or my PC. Or my router. Or any of the other non-100% secure devices and processes I use to get through my life. There's basic security precautions, and there's living in fear and paranoia, brought on by a misunderstanding of the threats you are facing.

If you think the risks to your privacy and security are remotely equivalent with a PC and a cell phone I'd argue that you're the one who is misunderstanding the threats you are facing. It is possible that your PC is no more secure than your phone, but that'd be uncommon and your own failing.

You can be responsible and secure a PC pretty well, but there is nothing you can do to prevent a functional cell phone from collecting extremely sensitive data and leaking it like a sieve.

vkouOP3y ago

They are not equivalent, just like driving a car and taking the bus are not equivalent risks.

And yet, I still drive. I don't even wear a racing helmet, and a five-point seat belt while doing it!

autoexec3y ago

These days, I don't think it's realistic to tell people not to drive. There will always be some risk involved, but you can give folks the tools and the information they need to help protect what's important to them most of the time.

Sometimes that might even include advice on helmets and five-point seat belts, but even without them we should be careful not to mislead people into thinking that a well maintained Volvo XC90 on their desk would be no safer than the 1970s Ford Pinto in their pocket.

Some things are just broken by design and shouldn't be trusted with anything you really care about, while other things can be reasonably safe if you're careful and pay attention.

saurik3y ago

As someone who works very prominently in mobile device security, and had to long ago come to the realization that I actually KNEW the people who could manage to hack into my phones... I agree with your answer 100%. The threat analysis here leading to only using Firefox on your desktop computer to access your bank makes absolutely no sense to me and--to inject some conspiracy theory back into this (for shits and giggles)--almost feels like "what the enemy wants you to do" ;P.

xani_3y ago

If your bank uses phone for 2FA (say OTP via SMS or whatever else), but you have no bank login, now attacker have to hack your PC (to get bank account login) AND phone (to get access to 2FA). So not having your 2FA source in same place as your password would be meaningfully more secure

j / k navigate · click thread line to collapse