Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
spwrozek
Sep 4, 2006

Sail when it's windy

Am I OK if I only have 1 of 3 credit bureaus frozen? Equifax was no big deal. Experian is a bunch of asses and I have to paper mail them a bunch of documents or they will not do it. Transunion just rejects my request and says this:

The requested URL was rejected. Please consult with your administrator.

Your support ID is: 13321472081937716677

Helpful I know...

I pulled all three reports as well today and everything looks good and clean. I had a bit of a freak out this afternoon. I got a text from my sister and I just quick answered it, I was in a meeting and so not really paying attention to it. The way she asked where I lived was weird and it was at an address from 2 places and 8 years ago. I just said No. Then she asked for my address and I just sent it over real quick. An hour later I thought, that was weird. I asked her what was up and she responded that she just wanted to send me something (assuming for my new dog). I know you can't do a lot with an address only and I haven't heard of text message spoofing but... So I want to just be sure. Also my sister...not saying she would try to open a line of credit in my name....but not not saying she would...

Adbot
ADBOT LOVES YOU

H110Hawk
Dec 28, 2006

spwrozek posted:

I know you can't do a lot with an address only and I haven't heard of text message spoofing but

https://en.wikipedia.org/wiki/Phone_cloning

Never trust a text or phone call. Never setup 2 factor auth to a text. It's one of the most nefarious attacks there is because your provider (bank) doesn't know it's not you.

The knowledge based tests for ID confirmation do ask for addresses from past houses and could be exactly what that person was asking for to attempt to pivot from your sister's stolen identity to yours. They are also garbage.

Nothing you do on a phone or with those credit agencies is secure. Accept it and move on. :suicide:

spwrozek
Sep 4, 2006

Sail when it's windy

H110Hawk posted:

https://en.wikipedia.org/wiki/Phone_cloning

Never trust a text or phone call. Never setup 2 factor auth to a text. It's one of the most nefarious attacks there is because your provider (bank) doesn't know it's not you.

The knowledge based tests for ID confirmation do ask for addresses from past houses and could be exactly what that person was asking for to attempt to pivot from your sister's stolen identity to yours. They are also garbage.

Nothing you do on a phone or with those credit agencies is secure. Accept it and move on. :suicide:

Yeah exactly why I am taking the steps I am. I talked to her later and it was her. But figure I should just not leave myself open in the future.

Sirotan
Oct 17, 2006

Sirotan is a seal.


You should absolutely freeze at all three bureaus.

spwrozek
Sep 4, 2006

Sail when it's windy

Sirotan posted:

You should absolutely freeze at all three bureaus.

Yeah. I know. I will have to call them next week when I am available during their business hours.

JIZZ DENOUEMENT
Oct 3, 2012

STRIKE!
Still not making enough, still like my current job all things considered, still looking for another job.

Mindfully dedicating more $ to savings every month.

tuyop
Sep 15, 2006

Every second that we're not growing BASIL is a second wasted

Fun Shoe

FrozenVent posted:

Let it back up into a lake, collect insurance.

Oh man I forgot about the lake car times. Thanks!

howdoesishotweb
Nov 21, 2002

H110Hawk posted:

Never setup 2 factor auth to a text.

What does this mean?

Slash
Apr 7, 2011

howdoesishotweb posted:

What does this mean?

2 Factor authentication (2FA) is an extra layer of authentication used when you try and login to something. It can be setup to send you a text message with a unique code which you have to enter to complete the login process.

There is an exploit which lets an unscrupulous 3rd party clone your mobile phone number, so that when they try and login as you the text message gets sent to their copy of your phone, which they can then use to authenticate as you.

The OP is suggesting that you should not use this method of 2FA, there are other methods where the code gets sent through an application interface(such as the gmail app) or by email for example.

H110Hawk
Dec 28, 2006

spwrozek posted:

Yeah exactly why I am taking the steps I am. I talked to her later and it was her. But figure I should just not leave myself open in the future.

Yup! You mentioned not having heard of text message spoofing so I wanted to break that innocence. :v:

Slash posted:

2 Factor authentication (2FA) is an extra layer of authentication used when you try and login to something. It can be setup to send you a text message with a unique code which you have to enter to complete the login process.

There is an exploit which lets an unscrupulous 3rd party clone your mobile phone number, so that when they try and login as you the text message gets sent to their copy of your phone, which they can then use to authenticate as you.

The OP is suggesting that you should not use this method of 2FA, there are other methods where the code gets sent through an application interface(such as the gmail app) or by email for example.

Correct! When your bank, health insurance, etc says "we're going to text this number a code" they are almost always doing it wrong. Either there is a easy way to reset which number they're willing to send the text/voicemail to, or they're vulnerable to the much more rare (for now) attack of of phone cloning. I slapped voicemail on there too because it's also not a good idea:

https://www.youtube.com/watch?v=ZpZbTPYB3cU

Next time you're at a prompt where they offer to send you a text/voice code see if you can change the number to your spouses without ever proving who you are first beyond the assumed-compromised password. If you can all them in a panic. The entirety of the phone system was developed based on trust and high barrier to entry with specialized equipment. That bled over into the phone networks and was combined with the need to keep the watts needed to secure the network low so battery life wasn't (more) abysmal. We now have all of the technology we need, but actually moving people off voice (SMS is included here as it rides voice frames, hence the hard 160 character limit) to data calls secured by strong encryption is slow going.

Demand TOTP/HOTP/FIDO2. (Google Authenticator, YubiKey sorta things.)

Shut up Meg
Jan 8, 2019

You're safe here.

H110Hawk posted:

Correct! When your bank, health insurance, etc says "we're going to text this number a code" they are almost always doing it wrong. Either there is a easy way to reset which number they're willing to send the text/voicemail to, or they're vulnerable to the much more rare (for now) attack of of phone cloning. I slapped voicemail on there too because it's also not a good idea:

I just want to add to your excellent post that there is a third way, too.

Apparently, it's pretty easy to tell your phone company 'whoops, I lost my phone, please give me a replacement sim'. Not only do you now have the number that receives the texts, you have the bonus that your victim doesn't know anyone is accessing your account until they get a new sim.

Hoodwinker
Nov 7, 2005

Shut up Meg posted:

I just want to add to your excellent post that there is a third way, too.

Apparently, it's pretty easy to tell your phone company 'whoops, I lost my phone, please give me a replacement sim'. Not only do you now have the number that receives the texts, you have the bonus that your victim doesn't know anyone is accessing your account until they get a new sim.
The way around SIM-swapping is to get a google voice number and hook your bank accounts up to that instead of your normal phone number. Google voice numbers can't be SIM-swapped.

H110Hawk
Dec 28, 2006

Shut up Meg posted:

I just want to add to your excellent post that there is a third way, too.

Social engineering is the best engineering.

Our whole system of critical infrastructure was setup based on trust and barriers to entry. Those are nearly all gone these days for a lot of systems. Especially things like healthcare. The whole rise of phreaking is an amusing read if you are nerdy and have never read about it before - the PSTN basically did whatever you told it. Cell networks and digitally switched landlines aren't much better.

spwrozek
Sep 4, 2006

Sail when it's windy

H110Hawk posted:

Yup! You mentioned not having heard of text message spoofing so I wanted to break that innocence. :v:

Got yeah. It was one of those moments where I was like, "this could be a thing, couldn't it..." :sigh:

Xenoborg
Mar 10, 2007

Got an email that Beam is live. I probably signed up for it based on something here, but looking at it again... it sounds a bit weird.

https://meetbeam.com/

quote:

With cash deposited into Beam, you begin earning a guaranteed 1.7% Base Rate APY and can boost the APY to as high as 7% each day by collecting and using interest boosts (called a “Billie”). You can effortlessly collect a free Billie each day, and if you invite a friend to subscribe to the mailing list here on this website, you each earn 5 Billies that can be saved and used later. The more you invite, the more you earn. You heard it right. It’s just that simple.

Furthermore, when your friends begin to use Beam, you can permanently unlock higher Base Rates (e.g. up to a minimum of 3% a year!). All interests are accrued and paid daily. Download the app for more details or refer to Beam’s Terms.

Is there a consensus on this?

The Slack Lagoon
Jun 17, 2008



Mlm but for cash

SpelledBackwards
Jan 7, 2001

I found this image on the Internet, perhaps you've heard of it? It's been around for a while I hear.

Yeah what the gently caress :wtf:

H110Hawk
Dec 28, 2006

Xenoborg posted:

Got an email that Beam is live. I probably signed up for it based on something here, but looking at it again... it sounds a bit weird.

https://meetbeam.com/


Is there a consensus on this?

That sounds awful and I was disappointed that it wasn't meat beam which sounds amazing.

Ralith
Jan 12, 2011

I see a ship in the harbor
I can and shall obey
But if it wasn't for your misfortune
I'd be a heavenly person today

Xenoborg posted:

Got an email that Beam is live. I probably signed up for it based on something here, but looking at it again... it sounds a bit weird.

https://meetbeam.com/


Is there a consensus on this?

It's a skinner box; the returns aren't worth the time. Stay away.

Xenoborg
Mar 10, 2007

OK sounds about what I thought. From some googling around, it promised to me more than that back when it was announced. All in all you can get about a 2.5% interest rate if you log in every day and do the things, but don't refer anyone. Something, but probably not worth the hassle unless you have 10 of ks in a savings account.

zmcnulty
Jul 26, 2003

Xenoborg posted:

OK sounds about what I thought. From some googling around, it promised to me more than that back when it was announced. All in all you can get about a 2.5% interest rate if you log in every day and do the things, but don't refer anyone. Something, but probably not worth the hassle unless you have 10 of ks in a savings account.

Banks do promotional interest rates all the time, for a variety of reasons, so "watched an advertisement" or "referred a friend" isn't necessarily a bad one.
But Beam is not a bank. Looking at the terms, their business is built on harvesting data and advertising/affiliate revenue. A regular retail bank makes money from different flavors of loans, nickel-and-diming depositors, etc.

If you are willing to exchange your personal data and time in exchange for a better interest rate, it doesn't really sound any more scammy than pre-dotcom Netzero. But it may need a lot of time every single day.

ToS posted:

You can increase the rate above the minimum rate by the choices you make in the App, such as collecting free Daily Rate Reward (also described as “Billies” in the App), inviting friends to subscribe to Website’s mailing list, etc. The payout of each Daily Rate Reward is variable. With these Daily Rate Rewards, it is possible to increase the daily rate up to 7.00% for each day. The daily rate will be reset to the minimum rate at the beginning of the following day. The effect of such Daily Rate Rewards can noticeably increase your earnings from the Beam Account, which will be credited to you on a daily basis and subject to the available-for-withdrawal balance as disclosed in the App. We reserve the right to modify, at any time, the methods for earning the Daily Rate Rewards, which will be disclosed in the App.

You can also increase the minimum rate, which will not be reset, by participating in various promotions, the terms of which will be disclosed in the App. The resulting elevated minimum rates (“Rate Tier”) received in these promotions may be a combination of routine interest payouts and Daily Rate Rewards. The available Rate Tiers as of the date of this Terms are 2.00% per annum, 2.50% per annum and 3.00% per annum.

sparkmaster
Apr 1, 2010

Hoodwinker posted:

The way around SIM-swapping is to get a google voice number and hook your bank accounts up to that instead of your normal phone number. Google voice numbers can't be SIM-swapped.

This is what I do, not sure where I heard this idea from.

I've had issues with Wells Fargo's authentication texts coming through. They simply don't show up. I can still get their automated system to call and I can punch in the code that way, but it's annoying. Less annoying than neferious elements getting access to my bank account, though.

Jato
Dec 21, 2009


Anyone have any experience with moving outside the US and keeping a job with a US company remotely? I'm moving to The Netherlands in January and went to my boss last week to give him a heads up that I'm leaving. He asked me if I'd be willing to stay as a remote employee and I said I'd love to if they can make that work. In the past week he's gotten approval from the Director and our CIO and it looks like they want to make it work. Today he went to HR about it and they basically just said it's fine, I just need to fill out our internal teleworking agreement.

From everything I've been able to find by researching online it looks like for this to all be done properly they would have to contract with someone in The Netherlands to run my payroll, withhold Dutch income taxes, and pay me into a Dutch bank account. So far they seem to just think they can continue paying me as they do now and nobody seems to realize that this is way more involved than just me moving and them continuing to pay me. I just spoke with our director and neither of us have the confidence that HR will do the legwork involved to figure this out and do it properly.

Just wondering if anyone has any experience with a similar situation or suggestions on how I can proceed? I'm thinking at this point it may be worth consulting with an immigration lawyer or tax specialist to get some insight from a professional - but I'm not even sure what the best kind of professional would be to speak to.

H110Hawk
Dec 28, 2006

Jato posted:

Anyone have any experience with moving outside the US and keeping a job with a US company remotely? I'm moving to The Netherlands in January and went to my boss last week to give him a heads up that I'm leaving. He asked me if I'd be willing to stay as a remote employee and I said I'd love to if they can make that work. In the past week he's gotten approval from the Director and our CIO and it looks like they want to make it work. Today he went to HR about it and they basically just said it's fine, I just need to fill out our internal teleworking agreement.

From everything I've been able to find by researching online it looks like for this to all be done properly they would have to contract with someone in The Netherlands to run my payroll, withhold Dutch income taxes, and pay me into a Dutch bank account. So far they seem to just think they can continue paying me as they do now and nobody seems to realize that this is way more involved than just me moving and them continuing to pay me. I just spoke with our director and neither of us have the confidence that HR will do the legwork involved to figure this out and do it properly.

Just wondering if anyone has any experience with a similar situation or suggestions on how I can proceed? I'm thinking at this point it may be worth consulting with an immigration lawyer or tax specialist to get some insight from a professional - but I'm not even sure what the best kind of professional would be to speak to.

You should definitely speak to an attorney who helps people be ex-pats and keep working. Your state bar association can help you with a referral, and then you can just start telling them what's up. Whomever talks to you should be able to clearly articulate if they can or cannot help you, and hopefully refer out to someone who can help you. You likely need a work permit in the Netherlands as well I assume? What were you planning on doing for work once you got there?

Jato
Dec 21, 2009


H110Hawk posted:

You should definitely speak to an attorney who helps people be ex-pats and keep working. Your state bar association can help you with a referral, and then you can just start telling them what's up. Whomever talks to you should be able to clearly articulate if they can or cannot help you, and hopefully refer out to someone who can help you. You likely need a work permit in the Netherlands as well I assume? What were you planning on doing for work once you got there?

Thanks, I'll see what I can find locally.

My girlfriend's company is transferring her on a highly skilled migrant visa and they are arranging my visa as her partner - I will have an unrestricted work permit.

The plan was to find a job there - I am in the process of interviewing with several companies but if I have the option to keep my current job and work remotely it would be my preference.

FrozenVent
May 1, 2009

The Boeing 737-200QC is the undisputed workhorse of the skies.
Noticed an unknown transaction on my credit card while doing stuff in the credit union app.

Looked into it, another smaller transaction from the same payment service provider a few days ago. Welp.

Called the credit union, disputed charges and a new card is in the mail, but drat. I didn’t need the aggravation.

On the other hand, pretty impressed that I got a notification from Apple wallet that my card was deactivated while I was still on the phone with security.

BAE OF PIGS
Nov 28, 2016

Tup
Started a new job and while reading the new hire benefits overview packet I saw that employees are eligible to join Baxter Credit Union. Having never heard of them, I looked them up and they over a 3% APR on their checking account up $15,000. So it looks like I'll be opening a checking account with them and moving a bunch of money from Ally over there.


Their savings account only offers something like .7% though...

100 HOGS AGREE
Oct 13, 2007
Grimey Drawer
is that one of those gotta make x number of transactions a month style checking accounts? I've never been able to do those I make so few transactions most months

literally this big
Jan 10, 2007



Here comes
the Squirtle Squad!

100 HOGS AGREE posted:

is that one of those gotta make x number of transactions a month style checking accounts? I've never been able to do those I make so few transactions most months

Yeah, I try to avoid those no matter how high the rates. Just give me a flat X% for my money. I want everything to be as automated as possible.

CannonFodder
Jan 26, 2001

Passion’s Wrench
Is the BWM thread on a forum adventure? I can't find it anywhere.

Cacafuego
Jul 22, 2007

CannonFodder posted:

Is the BWM thread on a forum adventure? I can't find it anywhere.

It’s in coupons.

Use your bookmarks and never lose your favorite threads!

taqueso
Mar 8, 2004


:911:
:wookie: :thermidor: :wookie:
:dehumanize:

:pirate::hf::tinfoil:

Cacafuego posted:

Use your bookmarks and never lose your favorite threads!

Use your bookmarks and never notice new threads! :eng99:

Cacafuego
Jul 22, 2007

taqueso posted:

Use your bookmarks and never notice new threads! :eng99:

Beware the dangers of only using your bookmarked threads! :science:

howdoesishotweb
Nov 21, 2002

Cacafuego posted:

It’s in coupons.

Use your bookmarks and never lose your favorite threads!

On the other hand the BWM thread title is much funnier knowing it was sent to coupons

CannonFodder
Jan 26, 2001

Passion’s Wrench

Cacafuego posted:

It’s in coupons.

Use your bookmarks and never lose your favorite threads!

look at me, forgetting Coupons exists and spending too much on soap

Edgar Allan Pwned
Apr 4, 2011

Quoth the Raven "I love the power glove. It's so bad..."
i asked this in the cavern of cobol as well but figured you guys might have a different perspective. I was offered a 3 month 1099 position with potential to be hired after the 3 months. The hourly isnt as much as I was expecting, but the hiring manager said that most people leverage a higher salary after the 3 months. Ive never done 1099 or even temp-to-hire. Im in tech but this is would be my second heavy tech role, going from QA to development. I want to take it but is there anything I should be looking for? Could i really gently caress myself with a 1099? are these common in tech?

Edgar Allan Pwned
Apr 4, 2011

Quoth the Raven "I love the power glove. It's so bad..."
the company is small enough that they dont have retirement or health insurance. the 50 yr old hiring manager/ceo referred to them as 'bennies'. so theres nothing i can really ask for in that area

Sirotan
Oct 17, 2006

Sirotan is a seal.


You might want to cross post to the Working in IT thread, you might get more/better engagement there: https://forums.somethingawful.com/showthread.php?threadid=3653857

H110Hawk
Dec 28, 2006

Edgar Allan Pwned posted:

i asked this in the cavern of cobol as well but figured you guys might have a different perspective. I was offered a 3 month 1099 position with potential to be hired after the 3 months. The hourly isnt as much as I was expecting, but the hiring manager said that most people leverage a higher salary after the 3 months. Ive never done 1099 or even temp-to-hire. Im in tech but this is would be my second heavy tech role, going from QA to development. I want to take it but is there anything I should be looking for? Could i really gently caress myself with a 1099? are these common in tech?

They are common but not good. Employees who have a choice should resist them or make them unfavorable for the company.

Edgar Allan Pwned posted:

the company is small enough that they dont have retirement or health insurance. the 50 yr old hiring manager/ceo referred to them as 'bennies'. so theres nothing i can really ask for in that area

This is also a red flag, how small of a company is this? Why can't they just hire directly? Remember that you need to have health insurance and a retirement, on top of the extra tax you pay on being a 1099 employee. How desperate are you for a job? You should get the W-2 salary offer in writing up front so you know what you are going in to here. An easy rule of thumb is 1099 should be making around double what you make as a W-2 to compensate for some of these things. If you don't include all of your actual costs in the 1099 offer you are giving yourself a pay cut.

Adbot
ADBOT LOVES YOU

Edgar Allan Pwned
Apr 4, 2011

Quoth the Raven "I love the power glove. It's so bad..."
during the interview they asked no programming questions so Im guessing thats the reasoning behind hiring as 1099 vs w2. i actually dont know the language theyre hiring for but the company had to enroll all the employees in a boot camp so 😐

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply