Have you turned off contactless payments or set contactless limits? Why?

[Urbandreamer]

Your phone should tell you each time your cards are used. If not, why not?

Having an app on your phone provides the bad guys with another way into your account.

Provided that you don't take phone security seriously.

Why is the assumption that people don't? Oh that's right, any suggestion that people should tighten up their phone security is treated as being too much effort.

Can I repeat again, people PLEASE tighten up your phone security. Change the settings so that the contents of SMS messages are not displayed while the phone is locked. Add a PIN to your SIM so that it can't simple be removed and used in another phone by someone else. Set a secure passphrase and facial recognition to unlock the phone.

Ps, my credit card app also picks random characters from my 15 character passphrase that must be entered before you can use the app. Other financial apps either are, or can be configured, to be that secure. One even uses a numeric keypad with the numbers in random locations so that repeating motions won't work.

[XFool]

The more 'clever' and complicated the technology gets, the more likely it is clever people can find a way in.

Remember the German's WWII 'unbreakable' Enigma machine?

[Urbandreamer]

The more 'clever' and complicated the technology gets, the more likely it is clever people can find a way in.

Remember the German's WWII 'unbreakable' Enigma machine?

Not personally, no I don't.

I do however have some knowledge of how the code was broken. Ignoring for a moment the capture of a working example, the policy of always starting messages the same way allowed pattern matching. Sure clever people can do wonders. Especially if helped by other people's own stupidity.

Marian Rejewski quickly spotted the Germans' major procedural weaknesses of specifying a single indicator setting (Grundstellung) for all messages on a network for a day, and repeating the operator's chosen message key in the enciphered 6-letter indicator. Those procedural mistakes allowed Rejewski to decipher the message keys without knowing any of the machine's wirings.

https://en.wikipedia.org/wiki/Cryptanal ... the_Enigma

The problem is NOT the "clever" technology, but human nature. You know, like not securing their phone or SIM.

[GeoffF100]

Having an app on your phone provides the bad guys with another way into your account.

Provided that you don't take phone security seriously.

Adding another door into your house does not make it any harder to break into, no matter how solid that door is.

Currently, most UK online banking uses SMS 2FA. Of course you need block lock screen notifications and set a SIM lock.

[servodude]

Provided that you don't take phone security seriously.

Adding another door into your house does not make it any harder to break into, no matter how solid that door is.

Currently, most UK online banking uses SMS 2FA. Of course you need block lock screen notifications and set a SIM lock.

True
- but the suggestions from Urbandreamer are more akin to putting bars on the windows and a proper deadbolt on your existing door

however it's also true that if you don't keep anything of value at home there's less to lose if someone gets in

I'm happy using my phone for just about anything - I have it on me sufficiently often that I am more likely to notice its absence than my wallet (and it's more useful for transaction tracking and notifications)

I do have a burner wallet for occasions where I think that might useful (a cheap market ripoff tyvek thing that can sit in my back pocket)

[XFool]

The more 'clever' and complicated the technology gets, the more likely it is clever people can find a way in.

Remember the German's WWII 'unbreakable' Enigma machine?

Not personally, no I don't.

I do however have some knowledge of how the code was broken. Ignoring for a moment the capture of a working example, the policy of always starting messages the same way allowed pattern matching. Sure clever people can do wonders. Especially if helped by other people's own stupidity.

Marian Rejewski quickly spotted the Germans' major procedural weaknesses of specifying a single indicator setting (Grundstellung) for all messages on a network for a day, and repeating the operator's chosen message key in the enciphered 6-letter indicator. Those procedural mistakes allowed Rejewski to decipher the message keys without knowing any of the machine's wirings.

https://en.wikipedia.org/wiki/Cryptanal ... the_Enigma

The problem is NOT the "clever" technology, but human nature. You know, like not securing their phone or SIM.

Think I suffered a memory 'glitch' here.

I thought I had previously read that the introduction of the Steckerbrett by the German's had helped provide a way in.

[chas49]

Moderator Message:
An extended discussion of Enigma and codebreaking is off-topic here albeit potentially interesting. Please carry that aspect on elsewhere if you wish to continue. Many thanks (chas49)

[didds]

If you are out and about, and lose your phone which is then used to pay for things.... how do you call your bank?

<non serious rhetorical question>

[GeoffF100]

If you are out and about, and lose your phone which is then used to pay for things.... how do you call your bank?

It is a serious issue. You cannot just borrow a stranger's phone and go through security with the bank within ear shot. If you are near home, having a backup phone at home will do the trick. Alternatively, some people keep a backup phone in their car. If your keys get stolen too, you have bigger issues.

[servodude]

If you are out and about, and lose your phone which is then used to pay for things.... how do you call your bank?

It is a serious issue. You cannot just borrow a stranger's phone and go through security with the bank within ear shot. If you are near home, having a backup phone at home will do the trick. Alternatively, some people keep a backup phone in their car. If your keys get stolen too, you have bigger issues.

In the case of my main account phone banking is accessible, to a degree, separate from internet banking; I need my customer number and a unique pin to access features like balance checking, and putting holds on cards, via a normal phone. Don't know if I can use it for cardless withdrawal, I'll check.