Rysiekúr (old account)Jul 8, 2017

What. The. Actual. Fuck.

#OneProvider requires "verifying" my credit card details by sending them a photo of myself holding my ID, and a photo of me holding the credit card in question.

Are they out of their minds? No, honestly, what have they been smoking and where can I get some!

#InfoSec

https://mastodon.social/media/CIpFvg9yMTlToU4MKmQ

Show threadMMN-o ✅⃠Jul 9, 2017
@rysiek You mean so they can do a duplication attack and send that image off to someone else to identify as you? .)
Show threadMMN-o ✅⃠
@rysiek oh, @krzysiekj had already commented on replay attacks. *catching up*
Jul 9, 2017 at 9:29amWeb