Post B0XIvPasdHmCfrf8vg by BillySmith@social.coop
 (DIR) More posts by BillySmith@social.coop
 (DIR) Post #B0XIeZ4s7RqXAGeq5w by TimWardCam@c.im
       2025-11-22T17:21:43Z
       
       0 likes, 0 repeats
       
       Security theatre episode 917:Can I make a payment of more than £20k? Nope, over the limit ...... unless ...... confirmed by biometrics.So, I register biometrics by getting my phone to take a picture of me. Then I verify the transaction by getting my phone to take another picture of me, two minutes later, and decide that the two pictures are of the same person.Approved. Money transferred. Job done. But WTF was all the hoop-jumping supposed to achieve?
       
 (DIR) Post #B0XIea38VO3IBAqy1o by cstross@wandering.shop
       2025-11-22T22:01:59Z
       
       0 likes, 0 repeats
       
       @TimWardCam Regulatory compliance. that's all it's intended to achieve—covering the bank's ass if the government comes calling.
       
 (DIR) Post #B0XIeb7QWv4vUlruM4 by BillySmith@social.coop
       2025-11-23T11:43:12Z
       
       0 likes, 0 repeats
       
       @cstross @TimWardCam Those are for the criminal charges. These are also required by the bank's insurance company that covers the bank against losses from fraud.
       
 (DIR) Post #B0XIebrVlZwRnhQiBc by TimWardCam@c.im
       2025-11-23T11:44:08Z
       
       0 likes, 0 repeats
       
       @BillySmith @cstross Yeahbut it's still nonsense that I can take two pictures of myself a minute apart and somehow the fact that they match is supposed to add security.
       
 (DIR) Post #B0XIecPBkMsdU9Bbg8 by BillySmith@social.coop
       2025-11-23T11:45:09Z
       
       0 likes, 0 repeats
       
       @TimWardCam @cstross Just because it fullfills the insurance policy requirements, does not mean that it isn't security theatre. :D
       
 (DIR) Post #B0XIeczLZvntII6U2S by strypey@mastodon.nzoss.nz
       2025-11-23T11:47:17Z
       
       0 likes, 0 repeats
       
       @BillySmith> Just because it fullfills the insurance policy requirements, does not mean that it isn't security theatre. :DOn the contrary, if the requirements of an insurance policy can be fulfilled with security theatre, it will be fulfilled with security theatre' ; )@TimWardCam @cstross
       
 (DIR) Post #B0XIedj4puNpa7V0Jk by TimWardCam@c.im
       2025-11-22T17:23:50Z
       
       0 likes, 0 repeats
       
       Still, the alternative, going to the bank branch, would have been even more hoop-jumping. IME that involves sitting for an hour watching someone type numbers I've given them into a computer, they then say "OK, all done".Here, I've worked out what's going on: If you've actually stuck it out for the whole hour, and haven't chickened out and run away before the police have time to turn up, then they assume you're not a scammer.
       
 (DIR) Post #B0XIvPasdHmCfrf8vg by BillySmith@social.coop
       2025-11-23T11:50:25Z
       
       0 likes, 0 repeats
       
       @strypey @TimWardCam @cstross Only until the next Quarter hits. If it starts costing the insurance company C-suite money by reducing their bonuses, then they'll change the policies."Cynical? Me? " :D