What's in your threat model?

from here and here

It's probably safe to say that banks aren't really prepared for customers making withdrawals at gunpoint, but it sounds like the ones in Lebanon need to start planning for it.

Senior loses $60,000 in computer virus banking fraud scam

Watch on YouTube

It's one thing to tell people to be careful online, but how can they really know what to look out for? That's why examples are important, and as bad as this is for Katharina Muir, at least her experience can serve as a warning to others and give them a more concrete example to look out for.

Proof of compromise when you're broke

found on Izismile

If the crook wants to prove they have access they have to do something, and when there's no money in the account, the only way your balance can go is up. 

Security for the Horde

from here

WoW has had 2 factor authentication since 2008 (if not earlier). They used a hardware token but have switched to a software token. Banks, meanwhile, were slow to adopt 2FA, and the best you seem to be able to hope for is SMS based authentication.

Automated tellers tell too much

from here and here (image source)

I feel like Mary Poppins would have been able to protect her banking information on her own using an umbrella over the shoulder.

You get what you pay for

found on Imgur

Maybe if banks had budgets the size of the Mars Program they could afford better cameras.

Now that's a backdoor

found on Reddit

I wonder how the rest of this vulnerability disclosure story went. Was he locked up? Did future sewer workers just release information about secret tunnels into bank vaults to the general public? And if so, how did THAT turn out?

You're a prisoner, Harry

found on Izismile

Imagine being so trusting that you try to use your newfound invisibility without testing it first.

Your secrets will be safe in here

from here and here (image source)

So apparently you can make a hotel out of an old bank (that must have been a heck of a bank!), and I suppose it makes sense that it's cheaper to find some way to re-use the vault than it would be to haul that thing out, so turning it into a meeting room is a pretty cool idea.

Don't spend it all in one place

found on Reddit

I'm all for making the scammers put way too much effort in for far too little reward.
 

Pray there's still money in there

from here and here (image source)

 I don't suppose a short ATM is any less secure than a normal one, though I guess being short isn't exactly great in the context of providing funds either.

Bio-mutt-ric authentication

found on Acid Cow

I've heard of smell-o-vision, and even the smell-o-scope, but the smell-o-phone is a new one on me.

Breaking into a bank with whiskey

Watch on YouTube

You have to hand it to Deviant Ollam here. He would make quite the gentleman bank robber. Not only because of his stylish attire, but also because he apparently puts the key in whiskey.

Sometimes security is like a work of art

found on Izismile

I don't know a lot about bank vault doors or how they're made, but those patterns in the metal make it seem quite ornate and I'm curious to know if they serve a function beyond looking pretty, since that's part of the door people probably won't see very often.

By day a bank teller, but by night a bank taker

from here (source image and article)

This is definitely the opposite of the way bank-related robberies are supposed to go, but bank customers are certainly easier to rob than banks themselves. Obviously not easy enough for this guy.

More secure than a piggy bank

from here (image source)

I don't think I need to explain the anti-theft features. Anyone who has ever pet a cat more than the randomly determined number of times the cat will allow can almost certainly guess what they are.

Best of luck

found on Imgur

Do we even care about catching crooks?

found on Eat Liver

If banks (or any number of other types of establishments that use surveillance cameras) cared, I'm pretty sure they could buy better cameras. Clearly better cameras are out there.

Bank-grade security

from here

Although it wasn't a bank, per se, that was fingered in this article, it was definitely a bank (or banks) that outsourced to the offending company. It's still the responsibility of the bank to keep that data safe and secure and clearly they didn't do that.