Hacker News new | past | comments | ask | show | jobs | submit login

> I know I’m logging into my bank because I initiated the connection, ...

Just because you initiated the connection how do you know the other end is you bank? Do you trust every internet company that carries your packets to the bank? Trust their employees? Trust their security practices? Do you trust firmware on all the devices involved?

> People are routinely defrauded by scammers who claim to be their bank,

I have read about this in the news just like I read about snakes with two heads etc yet I have yet to meet someone that has had this happen to them. What fraction of people that you know have had this happen?

Could it be that these people believe like you do that "I know I’m logging into my bank because I initiated the connection" as opposed to checking the digital signatures on the connection?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: