Hacker News Reader

Comment by patmcc | Hacker News Reader

Why would you ever login to a sensitive account on a device you don't own and have root on? Like I trust my employer not to do anything shifty with my banking info, if I were to use it, but I'm not going to take that chance for a dozen reasons.

View on HN

> Why would you ever login to a sensitive account on a device you don't own and have root on?

You mean like the phones that everyone uses with banking apps?

I don't. No financial transactions for me on something so easily lost or stolen, with any number of possible exploits lurking out there. Phones should be treated as compromised from day one.

I have my problems with this as well, but at least no one else already has root on my phone.

You probably use direct deposit in which case your employer already has your banking info

People often have accounts at multiple banks…

your employer knows how much they paid you and what account they paid to. They don't know your balance, where else you might be getting money from (selling science fiction short stories eh, Cosgrove?! This job should be enough for you!!), that you have donated money to the Democrats recently!! We suggested that was bad!! And lots of other things that come under banking info.

In most cases, that's an external payroll service, not the actual employer that has that info.

They have my account and transit number and stuff, sure, that's different than my username and password for online banking. We print them out on cheques that can be (reasonably) safely given to my plumber.

patio11/bitsaboutmoney has some good writing about this

What are the reasons?

Reply on news.ycombinator.com