Some of the Best Security Features Slow You Down on Purpose
Add a new payee to your bank account and try to send them money right away, and in a lot of banking systems you'll hit something most security features never do: a wall that isn't there to stop you, just to slow you down. The payee gets added fine. The transfer doesn't go through, not yet. An hour, sometimes longer, then it clears. If you actually meant to add that payee, you get your money there a little later than you wanted. If someone else added that payee, using your compromised login, they just lost their best shot at moving your money before anyone noticed.
That hour is the whole feature. Not the login check on either end of it. The empty hour in the middle.
Two different problems, two different tools
Banks didn't build this because login security wasn't good enough. They built it because the failure mode...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE
