I know which version I believe, and it's not Paypal's Their "security" is utterly dysfunctional, and systematised. To say "Paypal Takes Your Security Seriously" is a blatant PR driven LIE
How do I know?
I had to pay a significant sum via Paypal about 6 months ago which revealed just how broken their systems are.
To action the transaction it wanted to call me (for security), except the mobile on file was obsolete and the landline I was nowhere near. No alternatives were available - so we log into Paypal...
※ No alternative ways of authorising the transaction available
※ I can add and remove phone numbers, so I remove the obsolete mobile number and add the current one.
※ Go back to the transaction and I can now use the newly added number to authorise it.
※ Next morning I get a call from Paypal on the newly added number to helpfully tell me that as part of the mission to prevent fraud could I confirm I'd like for the two transactions of yesterday to be authorised. Sure.
※ No attempt to validate ME took place beyond the awareness of what the two outstanding transactions of the previous day were, and even then only in broad brush terms.
Now at this point I decided that pointing out to chap on phone just how broken this procedure was probably wasn't going to help me get my stuff in a timely manner, so I bit tongue and kept quiet (with difficulty).
There's no internal flag in the system to say a number is too recent to serve as automatic validation. ie using a number added after a transaction to validate said transaction is suspect to say the least.
Even the common sense point of view was absent that their fraud-prevention team should have seen the number was added to their systems less than eight hours previously - perhaps this is not the best route to confirm a transaction 8.5 hours previously. *That's fundamentally broken*
Shouldn't these two paths differ? There needs to be another factor - using a number (even if not newly added) for both automatic verification and human verification later is at severe risk of breaking if a phone is stolen.
So to defraud Paypal execute a transaction, add a new number and Paypal will then use that number for all verification of that transaction. Twice. Useless unless you happen to be a thief.
Charlie Brooker to Jon Snow: "You're like a dog at the controls of a helicopter"
I imagine this is a good analogy for most politician's understanding of tech and the internet.
Mr Cameron, you have no clue, but we already knew that.
Reacting to the discussion of the illegal mass surveillance by both the NSA and GCHQ, David Cameron shows just how much he cares about the views of the proles. (ie not in the least)
I'm all for protecting children, but curtailing everyone's freedom to do so is not protection: it's preparation for, as Oliver rightly points out, life in a "Big Brother" society.
and will receive 2014 monthly messages and a keyword on our shortcode throughout 2014.
Well two actually!
We've selected two charities to receive our Christmas offer of 2014 monthly messages throughout 2014. They are:
More details at the page along with an outline of both charities. We'll be keeping the page updated throughout the year.
Many thanks to all who applied - please try again next year!
Someone who actually knows crypto (Moxie) responds to Telegram's contest with a contest of his own.
hilarious and well worth a read
- World TextInternet Strategy and Technical Developer, 2011 - present
Interests in no particular order
- Bikes (clearly) :)
- Social Justice
I should fill this out properly one day :)
I blog occasionally (rarely) about Google+, social media, and SEO at mattholmes.co.uk
Photography, the Undiscovered Talent.
I'm maintaining a small (50 limit) circle of excellent but little known photographers. If you know someone who deserves to be in here, and they have 4,000 or fewer followers, please nominate them here:
As people gain numbers I'll create a "Graduated" circle, and mix up the people in the original. I think a good level to move on will be around 8-10k followers as that's self-sustaining.
The first release of the circle can be found here:
PM me if you have better ideas! :)