I realize "airbnb is a terrible company" is not exactly a newsworthy take, but holy shit yall
my wife was trying to get a reservation, and right at the last step they asked her for her *username* and *password* for her BANK
I'm glad I was in the room at the time, because if I hadn't seen it for myself I would not have believe it; I would have assumed it was another site pretending to be airbnb to scam her but nope, this was the real deal and the scamming was coming from inside the house
(needless to say she closed the tab and found another way to book a room for that trip that did not involve airbnb nor giving sensitive login credentials to an untrusted party)
@technomancy that’s wild. Any banks still rely on username + password as the only mean of authentication though? Around here (nordics) banking has required device based MFA for the last decade or so.
@anderseknert I read a thread about this (we didn't fall for it and give them the login info so this is second-hand info) but they said if MFA is enabled they actually tell you to pass the confirmation code on to them so they can use it, which every decent security guide will tell you is a red flag meaning you're 100% getting scammed and stop immediately
can't confirm this myself, but that's what I've heard; I hope they get sued into a smoldering crater for this behavior
@technomancy that’s… I don’t even know what to say