On: Request Node lib used by 48k modules is now deprec...

[no_protocol]

If someone knows your account number, they can take money from it, there is no separate secret or anything. It would be illegal, but they can do it.

[chrisseaton → no_protocol]

> If someone knows your account number, they can take money from it

You can seriously just say a bank account number at a bank in the US and walk away with a bag of cash from it, with no other security checks at all?

In the UK they’d make you enter a password or PIN or use 2FA.

[ixwt → chrisseaton]

No, you would have to do some authentication at a physical bank itself.

You can use the numbers to request a wire transfer from the account. In fact, when you're setting up an ACH transaction for bills and such, they tell you to get the numbers from a check.

[invisiblerobot → no_protocol]

what??

You can deposit without a pin bit to withdraw you need photo id and a verbal password or pin in every bank I've ever been in

[SAI_Peregrinus → invisiblerobot]

Are you in the USA? Our banks don't exactly do "security" at all.