05-06-2022, 04:31 PM
I'm sure Nick will give a professional opinion but as far as as I know, encryption is the least of your worries. That's good enough, unless your bank etc has seriously fouled up. Even if your passwords are relatively poor, a lot of banks etc will lock you out of your account after 3 attempts.
Malware on your computer or phone can compromise security before data is encrypted. "Social engineering" attacks can be anything from clicking on an apparently harmless link upwards are common.
It's not unknown for organisation's computers to be hacked. This can result in personal data being made all too public. Passwords *should* be secure as any organisation doing a decent job should only store salted hashes of passwords. If they aren't doing this, their IT director should be taken out and publicly flogged, before being hung drawn and quartered.
I've suffered one attempted ID theft event. I didn't lose any money but it was still a nuisance. The attacker probably used information about me that's available in the public domain to attempt to fool security with 3 organisations. Probably done over the phone in each case. trying to impersonate me. They had partial success with Nationwide who handled the matter rather badly but didn't allow any fake transactions. First Direct and Three deflected the attacks successfully.
Malware on your computer or phone can compromise security before data is encrypted. "Social engineering" attacks can be anything from clicking on an apparently harmless link upwards are common.
It's not unknown for organisation's computers to be hacked. This can result in personal data being made all too public. Passwords *should* be secure as any organisation doing a decent job should only store salted hashes of passwords. If they aren't doing this, their IT director should be taken out and publicly flogged, before being hung drawn and quartered.
I've suffered one attempted ID theft event. I didn't lose any money but it was still a nuisance. The attacker probably used information about me that's available in the public domain to attempt to fool security with 3 organisations. Probably done over the phone in each case. trying to impersonate me. They had partial success with Nationwide who handled the matter rather badly but didn't allow any fake transactions. First Direct and Three deflected the attacks successfully.
www.borinsky.co.uk Jeffrey Borinsky www.becg.tv
