One Article Review
| Source |  AlienVault Blog |
|---|---|
| Identifiant | 1633905 |
| Date de publication | 2020-04-02 12:00:00 (vue: 2020-04-02 12:08:18) |
| Titre | Here is why your healthcare provider cannot accept Venmo payments |
| Texte |
This blog was written by an independent guest blogger.
Are you using Venmo to send and receive payments? People use Venmo for everything, and in these times when no one wants to handle actual money for fear of spreading infection, Venmo is a brilliant idea. Of course, the difference between Venmo and other mobile payment applications is that Venmo adds a social networking component to its process. While this makes things very easy for transacting payments, it creates some serious privacy concerns.
Privacy and confidentiality are cornerstones of many business interactions. Whether you are in treatment for a medical condition, or if you are seeing a psychotherapist to work through an anxiety problem, not only do you want your information protected, but you also do not want anyone knowing the identity of your healthcare provider. Unfortunately, Venmo has a flaw that does not allow for such confidentiality.
Please note that I am not bashing Venmo. As stated earlier, it is a fine application that is perfect during these tense, Covid-19 times.
Most of my friends who use Venmo had no idea of the problem, so here is a short demonstration to show what I am describing:
First, the way to keep your transactions private is by changing a setting in the application:
If you are just now discovering this setting, you can also hide all your past transactions so that all of your activity is hidden.
Of course, if you want to have some fun, you can just name your transactions to whatever you want, as one of my wise-guy friends did when sending some money to me:
Apparently, some folks are not joking, and are broadcasting all kinds of illicit activity through the platform. Please beware that illegal transactions could result in you getting kicked off the application, so it is not recommended.
The real problem is this: even if you set your Venmo to “private” mode, it is still leaking too much inferential information about all of your associations. If you go to a person’s profile page, there is a heading named “Friends” that allows you to see everyone in a person’s Venmo world:
This is a social engineer’s dream! The entire family of a total stranger can be accurately mapped just by scrolling through their “friends” list. This is exactly how the “grandparent scam” is so effective.
To take this to the next level, if a person happens to pay a medical provider with Venmo, a social engineer could use all the publicly available information to easily impersonate that person, leading to a full medical records breach. This is why your healthcare provider will not accept payments through the application.
When will Venmo lock down the Friends page? Why was that not built into the application from the start? Venmo is part of PayPal, and it is a safe way to move money between you and your friends and family. However, it just needs a bit of a privacy nudge.
 |
| Envoyé | Oui |
| Condensat | “grandparent venmo about accept accurately activity actual adds all allow allows also anxiety anyone apparently application application: applications are associations available bashing between beware bit blog blogger breach brilliant broadcasting built business but can cannot changing component concerns condition confidentiality cornerstones could course covid creates demonstration describing: did difference discovering does down dream during earlier easily easy effective engineer engineer’s entire even everyone everything exactly family fear fine first flaw folks friends from full fun getting guest guy had handle happens has have heading healthcare here hidden hide how however idea identity illegal illicit impersonate independent infection inferential information interactions its joking just keep kicked kinds knowing leading leaking level list lock makes many mapped me: medical mobile mode money most move much name named needs networking next not note now nudge off one only other page part past pay payment payments paypal people perfect person person’s platform please privacy private problem process profile protected provider psychotherapist publicly real receive recommended records result safe scam” scrolling see seeing send sending serious set setting short show social some spreading start stated stranger such take tense these things this: through times too total transacting transactions treatment unfortunately use using venmo very want wants way what whatever when whether who why will wise work world: written your |
| Tags | Guideline |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.