Receipts security issue

[jzw95]

@coffeemadman

Anything I give to my bank, regardless, I expect to be securely saved.

You’ll be glad to know then, if you read the previous discussion, that your receipt images are secured.

@daniel

• Everything that is accessible to a single person over the internet is theoretically accessible to anyone
• Whatever the authentication method it is ultimately a sequence of 0s and 1s that allow one person and not another.
• Any sufficiently long random sequence of 0s and 1s cannot be brute forced with the computing power available on the planet over a time period that doesn’t exceed the age of the earth.
• So provided the randomness is long enough (which it is in this case), brute forcing is not a viable attack vector.

There’s other ways of providing security than a password.

@coffeemadman

On a really hypothetical scenario, a fraudster might want to build up a profile of movement on a person, and if all their receipts are stored unsecurely

Except that the receipts aren’t stored insecurely. If you can present an actual scenario where a ‘fraudster’ can get access to several (or even one) of your receipts that doesn’t involve you downloading a CSV export and sharing it with them (intentionally or not), then I’m interested.