Post #4358543

2026-08-03 15:32 UTC

I wish I could come up with a good way to make it so any money above a threshold automatically got invested into something that would take at least a few hours, or up to a day to cash out. I'm trying to think of how even if an attacker popped my whole password vault that they couldn't steal more than a month's worth of expenses. But all the things I can think of would require manually moving money around every paycheck, and I'm just not going to remember to do that. Yes, I have MFA everywhere and such, but those can get popped too.

Replies (5)

@Epic_Null@infosec.exchange 2026-08-03 15:41

@JessTheUnstill@infosec.exchange Would your bank be able to set a transfer limit on your account so any larger expences require confirmation? That seems like a feature they may support.

Open ##4358542
@JessTheUnstill@infosec.exchange 2026-08-03 15:37

With the exception of like ... Bail money ... There's no purchases more than my monthly budget + X% I need laying around my account. I can plan in advance to move money back if I'm doing a major purchase.

Open ##4358598
@danielcberman@infosec.exchange 2026-08-03 16:19

@JessTheUnstill@infosec.exchange Does your bank/financial institution offer any sort of automatic savings deposit tool? Presumably you have online banking turned on for your checking account but maybe ask if it’s possible to turn it off for the savings account? If your income and expenses are stable it might be possible to schedule an automatic transfer into another bank/financial institution without online banking setup. Nothing to pop if a login doesn’t exist.

Open ##4368834
@CordiallyChloe@tech.lgbt 2026-08-03 16:53

@JessTheUnstill@infosec.exchange can Acorn do something like that?

Open ##4368835
@grumpybozo@toad.social 2026-08-03 17:11

@JessTheUnstill@infosec.exchange I have set up my PayPal *savings* to pull money through my credit union debit card periodically — primarily as an automatic savings measure, not loss firewalling — which effectively makes money inaccessible from the CU account. Making it spendable at all would require a manual PayPal transfer. This would be weakened if both accounts could be accessed with the content of a password vault alone. My CU uses a live face shot and PayPal uses either a device-bound passkey or TOTP.

Open ##4368837