Worked in 3 major banks in my country. All of these seems so overthinked and overenginered and not really answering any real fraud risk. To me, personally, it looks more like marketing move for geeks, rather than real necessity.
If you feel differently, by all means go do business with a bank that doesn't waste all this effort.
The inclusion of NSA stuff got my eyes rolling. If you’re worried about NSA implants, you probably should be thinking about the provenance of the HSM, smart cards, etc.
No, it is not. That is the point. There are many levels of protection, many checks and validations, and even if you pass all of them still a lot of things can be reversed pretty easily. Banks are not cryptocurrency clowns with private key obsession.
Only above the non-trivial limit guaranteed for UK regulated banks.
Root access to servers, to secret keys or password is not beneficial. There are many systems validating each other. Even if you got access to one system, even if you control it for some time, you cannot really permanently transfer any significant amount of money anywhere. Fraud detection and AML systems will trigger an alert. Behavioral analysis systems, which are must have in industry, will trigger an alert, to say nothing about many other systems I really do not want to discuss in public.
The problem with hacking a bank is all they can really do is try to screw up the data or lock it down. Even people who work at the bank can't figure out how to move money around, much less where to wire it to to profit anonymously.
it's someone who found the video of the DNSSEC key signing ceremony and decided to implement it at their company