Louis Ingenthron @LouisIngenthron@qoto.org

So, apparently #RegionsBank, which does not offer token or app authentication, uses easily-spoofed browser-provided data to determine whether or not to trigger its SMS #2FA authentication.

It's insane to me that a *#Bank* of all places could be such a failure on basic #DigitalSecurity measures.

Guess I need to start shopping around for a new account.

Well, that issue is resolved now. 😂

@jperlow Crossposting wasn't what you described in your original post. It's a tool specifically designed to help people abandon centralized social media in favor of decentralized, which is a threat to their business model (whereas crossposting tends to be a boon to their bottom line).

And that's before you get to the security concerns:
You described a tool that "logs into your account" which is a common attack vector for phishing scams. If you were more precise with your words (i.e. "Movetodon needs authorization to you account to access it through the Twitter API"), then maybe it wouldn't have been flagged.

@jperlow "Overreach"? That's like McDonalds asking you to leave when you bring in a Burger King meal and sit down in their restaurant to eat. Like, I see why it upsets you, but from their standpoint, it makes perfect sense; not doing so would be negligent.

Plus, it's nice that they're doing it so transparently. Imagine if all mastodon content was just quietly never shown to anyone?

@NatlSecCnslrs@mstdn.social I'm with tech support on this one. Warning lights are meaningless while stuff still works.

@Popehat That sounds like what every college kid wrote the first time they smoked a joint.

Is the real problem with the susceptibility of the uneducated simply that they've never been exposed to stoned philosophy majors?

@gulovsen Car mechanics have a long history of "joke" signs that say there's an upcharge on any job that you already tried to fix yourself...

May not be a bad idea to take up the same practice for this situation.

@aebrockwell It's like a job designed for someone who failed their marketing internship. "Can't write for humans? Write for machines instead!"

These are the kinds of articles you get from people who think the primary work of software engineering is writing code instead of debugging.

https://www.washingtonpost.com/technology/2023/02/25/prompt-engineers-techs-next-big-job/?utm_source=substack&utm_medium=email

I really don't like Ron #DeSantis, but I have to admit that his decision to wait until the last possible moment to announce his candidacy is smart and savvy as hell. Makes me even more worried about his ambitions, frankly.

@alysondecker @jayreding Nope. It's a French guy now, Bernard Arnault. Elon is just richest in America.

And if we keep up the pressure, that won't last long either.

@alysondecker @jayreding "No consequences"? He currently holds the Guinness world record for most money lost by any single individual, and he's still hemorrhaging. For a narcissist like him, that's got to sting.

@davidaugust @pluralistic A "different website" from what? How do they know which website is the real one without calling the business?