Path: ...!weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Chris <ithinkiam@gmail.com>
Newsgroups: uk.telecom.mobile,comp.mobile.android
Subject: Re: Mobile banking: alarm as fraudsters take over handsets
 and raid accounts
Date: Sun, 14 Jul 2024 19:54:27 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 45
Message-ID: <v71adj$9mrn$1@dont-email.me>
References: <v6tmll$3ic82$1@dont-email.me>
 <v6tvmo$jien$1@solani.org>
 <lffei9F5umuU1@mid.individual.net>
 <v6u2a0$hub2$1@solani.org>
 <v6u36c$3kg3i$1@dont-email.me>
 <v6uhvn$3n53o$1@dont-email.me>
 <khj59jtvlj986ud74s3267geruhkbviima@4ax.com>
 <v6v24n$3ptte$2@dont-email.me>
 <v6v4po$3qa90$1@dont-email.me>
 <v705gd$3505$1@dont-email.me>
 <v70qcp$6sqb$1@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Sun, 14 Jul 2024 21:54:27 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="2d98199b629906d7a3256750abf9b833";
	logging-data="318327"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX19Anik/9IghVey1lxi4fqutkObPWvbLwlw="
User-Agent: NewsTap/5.5 (iPhone/iPod Touch)
Cancel-Lock: sha1:grOJ0NaykSoYJOagYhSML4aA5Ig=
	sha1:5jPm9v4TfVzFxxR/MK4IB0u1XzI=
Bytes: 3199

AJL <noemail@none.com> wrote:
> On 7/14/2024 2:24 AM, Chris wrote:
>> AJL <noemail@none.com> wrote:
>>> On 7/13/2024 4:20 PM, Chris wrote:
>>> 
>>>> Bank apps ask you to set a PIN as an added level of security.
>>>> People are lazy and don't want to remember another PIN so use the
>>>> same one as the phone lock screen.
>>> 
>>> Depends on the bank app. Mine don't offer pin capability but do
>>> require long passwords using all types of characters.
>> 
>> That's sounds like a PITA.
> 
> PITA? Not for me. Because I'm one of those paranoid folks who don't keep
> any banking (or investment) apps on my phone for security reasons. 

The topic is mobile banking...

> As far a pin vs password I find passwords easier. That's because I use a
> formula for each site. Something like $ + my first employee number +
> first 3 letters of site/app name + my second employee number + next 2
> letters of the site/app name + the number 13. This is just an example
> and it can give me a 15+ character password that I can easily remember
> and type in in a just few seconds.

Some sites don't accept passwords longer than 8 or 9 chars and/or no
special character. What do you do then?

> I use the formula for ALL my password requiring sites, sensitive or not.
> I let Google remember and insert the non-sensitive ones.
> 
> Also I can remember and use my formula for ALL my sites, even at my age.
> I doubt I (or most folks) could remember that many DIFFERENT pins...

The problem with a formula is that there too sites that have special
requirements - i.e. some require a special character, others require no
special character - and so you have think of another formula. 

I gave up years ago and have a password manager. Much easier. Only one
password to remember.