Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
@scor
Also the QS is a fairly secure measure to communicate a valid statement through the nets.
Yanowaddimsayin'. -
@Scor Yes. That's part of the point I was trying to make.
It's scary how big the range was.
From straight illegal to perfect legal.
And I gave the example with the qualified signature because it terrified me the most - of course it's secure and "the right thing to do". But I never ever would.
have imagined a 1st level support explain it correctly and sound like they actually know what they're talking about... they are usually underpaid guys who follow a strict ruleset of question A must be answered with XY - cause they don't know what the hell they're talking about and wouldn't care cause they don't get paid for it...
It's just sickening that it is definitely possible and one bank did it absolutely right without being stuck in analogue ways and the rest did it in either analogue or digital mayhem style...
And even more worrisome that they actually still exist cause I really doubt part it's legal.
when your code is a mess but everything work out in the end
Did you say security?
I'll try to pay back some smaller credit by one large credit...
Hence I need to contact the banks and get one (!) fucking frigging stupid piece of paper which lists the account number and the amount of money I need to pay back.
Sounds simple ...
Well.
One bank just answered my email request by sending me that piece of paper. Except they didn't have any validation of my identity.
Yes. They answered the request of 'I want to pay back the credit in full, can u send me the necessary documents?' (more formal of course) with confidential data without any more credibility than my email address.
YAY.
Another bank requests a telephone call for identity validation and sending back a signed form via postal service...
Another bank just needs a PDF sent via mail with an electric signature (yeah. They were aware of what that means - I was shocked and confused) or a "qualified signature matching previous documents" (translated from German).
The last one offers a WhatsApp number - send a GIF / JPG or video and we answer directly.
I need to reach a higher state than drunk.
It's not funny to know how confidential data gets mistreated by companies who should have the highest security.
rant
scotty doesn't know....
security