Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

Chat CIMB kena hack?

views
     
scorptim
post Dec 17 2018, 01:59 PM

Enthusiast
*****
Senior Member
700 posts

Joined: Nov 2009
QUOTE(Mummy Shark @ Dec 17 2018, 01:21 PM)
orang kerja dalam line IT memang dah tahu IT workers dari india hampas. tapi bosses like lower costs dan policy makers buta IT.
*
India IT guys are only good at coding, not at logic.

You give them broad or vague instructions they gonna use the simplest shittiest code to get the job done coz they won’t bother to think “what else might be needed”.

If you have a good PM or account manager that can communicate to them exactly what specifications are needed, they can do it. Just don’t expect them to think or figure out anything for you.

QUOTE(zul_sur @ Dec 17 2018, 01:29 PM)
dev happy2 code, tester dont care, manager cannot wait to announce new release, media cannot wait to announce new security system.
*
Project manager mana? Tester only tests based on test scripts provided by the project team and 99% of the time test scripts from project team is BS.

QUOTE(Mummy Shark @ Dec 17 2018, 01:32 PM)
honestly, nothing wrong with CAPTCHA on any screen.

the core behind CAPTCHA is to reduce automated entry by machine. it is not possible to eliminate altogether in probability, but the bar is higher than nothing at all. even if you only manage to eliminate 50% of automated attacks, that itself is a reduction.

look beyond the CAPTCHA and stop complaining about it being on any screen.

instead, question what the screen does to further eliminate threats not yet filtered by CAPTCHA.
*
CAPTCHA is one of the easiest “security measure” to bypass and this is a billion dollar bank we’re talking about.

scorptim
post Dec 17 2018, 02:06 PM

Enthusiast
*****
Senior Member
700 posts

Joined: Nov 2009
QUOTE(unknown_2 @ Dec 17 2018, 01:53 PM)
OCBC not bad, their branch amoi also not bad.
especially masjid jamek branch, almost all amoi is tapable.
*
QUOTE(lagista @ Dec 17 2018, 02:01 PM)
i agreed fully ocbc ol > all !! brb!!
*
Actually all OCBC branches have pretty nice OL working in their customer facing roles. Puchong and subang OCBC also many hnnngh. The bank pandai to pick smexy amois for marketing purposes.
scorptim
post Dec 17 2018, 02:16 PM

Enthusiast
*****
Senior Member
700 posts

Joined: Nov 2009
QUOTE(buraqdunia @ Dec 17 2018, 02:07 PM)
where the appreciate tered bout them, create 1 la.  vmad.gif  devil.gif
*
Wah, takkan wan me like stalker go in pretend do transactions then snap their pics. 😅

QUOTE(unknown_2 @ Dec 17 2018, 02:08 PM)
i noticed they hav 1 amoi just to stand at the ticketing machine to press the button for u.
they will change shift & always only good looking amoi get that post.
*
Yup, you’re right memang always pretty amoi wearing smexy outfit doing this. Young one summore must be those fresh grads that just joined them

QUOTE(phillip88 @ Dec 17 2018, 02:09 PM)
Otot, JayaOne OCBC has the least crowd and you can always get a quick run!
*
Never went to JayaOne OCBC before but I bet their business model is the same. Pretty smexy amoi as front facing role.

scorptim
post Dec 17 2018, 02:17 PM

Enthusiast
*****
Senior Member
700 posts

Joined: Nov 2009
QUOTE(lagista @ Dec 17 2018, 02:14 PM)
ok let's not lose focus on this tered main point: bank sotong  icon_rolleyes.gif
*
Sorry terpesong abit, smexy amois tend to be able to do that.

But yeah back to bank sotong with their sotong security measures.
scorptim
post Dec 17 2018, 03:04 PM

Enthusiast
*****
Senior Member
700 posts

Joined: Nov 2009
QUOTE(Mummy Shark @ Dec 17 2018, 03:00 PM)
people are taking shortcut by blaming cimb, which have their own fault.

it's paypal that people should be burning, for allowing the fraud to happen. they should support 3D Secure, but they chose not to.
*
You’re missing the point here obviously there’s a breach on cimb end otherwise this PayPal fraud would have happened to every other bank. It’s mainly affecting CIMB cards which means there’s a leak from CIMB. You don’t just get to wash your hands and blame it on PayPal. How dafuq did the fraudsters get the CIMB cards info to begin with?
scorptim
post Dec 17 2018, 03:18 PM

Enthusiast
*****
Senior Member
700 posts

Joined: Nov 2009
QUOTE(Mummy Shark @ Dec 17 2018, 03:07 PM)
I already said, cimb have its fault.

but paypal allowed this to happen. I have 3 other banks in my paypal and they are also treated the same as cimb cards.
*
For me, I always look at the root cause not the symptoms. The root cause is still the fact that CIMB client details are being leaked.

PayPal not supporting TAC is a security concern, however the bank is the one responsible to ensure their customer’s money is secure not the third party company (PayPal)

Plus since you know that you had a breach of data, what actions were taken by cimb to ensure their customers funds are safe? If they can’t terminate and reissue all cards then the very least is to disable their cards from being used by third parties which does not require TAC (banks can block these things like how maybank cannot be used for steam purchases before this).

In terms of PayPal they can improve by using TAC but they don’t have to, their customers should know they don’t support TAC, so why still use their services if you feel it’s not secure?
scorptim
post Dec 17 2018, 05:20 PM

Enthusiast
*****
Senior Member
700 posts

Joined: Nov 2009
QUOTE(Mummy Shark @ Dec 17 2018, 05:13 PM)
so, if secure *today* hsbc and maybank and rhb and pbe suddenly being gets spent like cimb now, will we bring out the pitch forks as well?
yes, cimb probably fucked up by letting loose of the card numbers.

but for now, it takes paypal to take advantage of the loose numbers.
wrong. I feel paypal is secure for my purposes.
but someone else is taking advantage of "insecure" paypal.
should I get the blame for being a non-fussy paypal user. is me being a paypal user being the issue here in the first place?
you operate your business according to the law of the land.
can paypal operate without BNM's licence for e-money? okay, maybe it's not mandated for e-money. but I do expect paypal as one of oldest operators to up their game in the land they operate in. especially when bnm took the initiative to combat fraud which operators themselves complained of being too high in this region.
*
If you feel it’s secure to use then you use it on your own risk. That’s up to you.

Again, I repeat, the bank is responsible to ensure the security of their depositors funds not a third party company.

Like this then all websites/third parties that don’t support TAC is to take the blame for the banks own incompetence?

You’re looking at fixing the symptoms without fixing the root cause. You need to fix the root cause to solve the issue.

 

Change to:
| Lo-Fi Version
0.0311sec    0.66    7 queries    GZIP Disabled
Time is now: 17th December 2025 - 05:36 PM