Activity
Mon
Wed
Fri
Sun
Dec
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
What is this?
Less
More

Owned by Andrew

Obsidian Metrics is an AI/financial education community for people building their own systems before they need them.

910 contributions to Obsidian Metrics
This week: move your money accounts off text message codes and onto an authenticator
Most people already use a second step when logging into financial accounts, which is good, and most of them are using the weakest available version of it, which is worth fixing. A code sent by text is far better than nothing. It is also the one form of second factor that can be defeated without touching your devices at all, because it depends on a phone number, and a phone number is an account held by a carrier rather than a secret held by you. The upgrade is to an authenticator app, which generates codes on your device from a shared secret, or to a hardware key if you want the strongest option. Neither involves a message that can be intercepted, read aloud during a convincing phone call, or redirected by persuading a carrier to move your number somewhere else. The whole class of attack goes away, not because the attacker is less skilled, but because there is no longer a message in transit to take. Here is the practical sequence. List the accounts that can move money or unlock others: your primary email first, because it is the reset path for everything else and is usually the most under-protected, then banks, brokerages, and payment apps. For each, open security settings and look for an authenticator option. Set it up, and critically, save the recovery codes it gives you somewhere offline and durable. Losing your phone without those codes is the real risk of this upgrade, and it is entirely preventable by spending one extra minute at setup. Two notes. Some institutions still offer only text codes, in which case you have learned something useful about them and can at least add a PIN or port-out protection with your carrier, which is a separate and quick call. And while you are in those settings, turn on alerts for logins, contact changes, and new linked destinations, because those notifications are what turn a slow takeover into something you can interrupt. The whole exercise is perhaps half an hour and it retires the single most common failure path in account compromise.
0
0
Urgency is the one ingredient every scam needs
Scams vary enormously in their surface details. The story changes, the asset changes, the channel changes, the amount changes. What does not change is that somewhere in the encounter there is a reason you have to act before you would normally have acted. The window is closing. The allocation is nearly gone. The account will be locked. The rate expires today. Strip that element out and almost none of these situations survive contact with an ordinary week. The reason urgency is structurally necessary rather than merely convenient is that most people who get caught are not lacking information. They are lacking the interval in which they would have gone and gotten it. A phone call to someone who knows more, a search, a second opinion from a person with no stake, a night of sleep. None of that requires special expertise. It only requires time, which means the entire attack has to be built around removing time from the situation. Pressure is not a personality trait of the person pitching. It is load-bearing. This is also why urgency is a better detector than plausibility. Trying to evaluate whether a story is true puts you in a contest against someone who has told that story hundreds of times and refined it against everyone who pushed back. You will sometimes lose that contest, and confident people lose it more often than nervous ones. Noticing that the clock is doing the persuading is a much simpler operation, and it works even when you cannot tell whether the underlying claim is real. The useful move is to make the response automatic so it does not depend on judgment in a moment engineered to degrade judgment. Decide, once, in a calm hour, that anything financial that cannot wait twenty four hours gets a no by default. Not a maybe, not an investigation, a no. You will occasionally decline something legitimate. That cost is real and it is small, because legitimate financial arrangements almost never evaporate overnight, and the ones that do were structured by someone who benefits from them evaporating overnight. The rule is cheap precisely because the thing it filters out is rarely worth much.
0
0
AI and Finance: a familiar voice is no longer evidence of who is speaking
Most people carry an unexamined assumption about voices, which is that recognizing one is close to proof of identity. It has been a reasonable assumption for most of human history, and it is the reason a phone call feels more trustworthy than an email without anyone deciding that it should. That assumption has weakened considerably, and it is worth updating deliberately rather than discovering the update in the middle of an emergency. Synthesizing a recognizable voice now requires a short sample and very little skill. Samples are abundant, since most people have voice or video somewhere public, and even a voicemail greeting is material. The same applies to video, with more effort and somewhat lower quality, though quality matters less than people expect when the recipient is distressed and not examining anything closely. The point is not that this is happening constantly. It is that voice has moved from strong evidence to weak evidence, and a defense built on it is now built on something that will not hold. The situations where this matters are specific and predictable. A family member in trouble who needs money urgently. An executive instructing a transfer. A relative asking you to confirm something over the phone. What these share is a combination of emotional pressure and a request to move money, which is the same structure as always. The voice is simply a new and much better delivery mechanism for it, and it bypasses the skepticism that a written message would have triggered. The defense is old and still works, because it does not depend on detecting anything. Verify through a channel the caller did not choose. Hang up and call the person back on the number you already have. Ask something only the real person would know that is not discoverable online, which means a shared memory rather than a fact. Agree on a family phrase in advance, which sounds theatrical until you consider how ordinary a fire drill is. And keep the underlying rule that money never moves based on a single unverified contact, no matter whose voice is on it. Recognition was always a shortcut. It is a shortcut with a shorter expiry date now.
0
0
📊 Daily Market Update — November 11, 2026
Welcome back — here's the plain-language breakdown of what the market data says for November 11, 2026 and what it means for the platforms and systems we track inside the community. No hype, no predictions — just the verified closing numbers, what changed, and what to watch next. Let's get into it. 🌍 The Headline U.S. stocks closed higher across the board on November 11, 2026. The S&P 500 finished at 7,619.38 (+1.31%), the Nasdaq Composite at 25,466.19 (+1.60%), and the Dow at 52,486.49 (+0.49%). Takeaway: This edition reports the verified session closes so your read starts from data, not the loudest headline. A systems-first approach tracks each index and asset as its own basket rather than reacting to a single number. 📈 U.S. Stock Market Performance S&P 500 (SPX): 7,619.38 (+98.45 / +1.31%) Dow Jones (DJIA): 52,486.49 (+254.60 / +0.49%) Nasdaq Composite (IXIC): 25,466.19 (+400.32 / +1.60%) What moved it: - Figures are the official closing levels versus the prior session. - The three indexes moved together. - Net read: use the tracker to tie the day's move to whatever positions or platforms it touches. 💰 U.S. Economic Data & Major Earnings This is a data-verified edition: it reports the confirmed index, crypto, and commodity closes. Specific earnings or economic prints for the session are not detailed here unless independently confirmed — check a primary source before acting on any single catalyst. 🏦 Federal Reserve & Interest Rates - Fed funds target range as of the most recent FOMC decision: 3.75%–4.00%. - Next scheduled FOMC meeting: December 8–9, 2026 (carries an updated Summary of Economic Projections). - Confirm the current policy stance from the Fed's own releases; treat rate expectations as a moving input, not a settled outcome. What this means for your system: - The goal is not to predict the next move — it is to keep your system resilient whether rates hold, rise, or fall. 🌐 Global Markets Global equities and the energy/geopolitics backdrop remain the standing variables to watch alongside the U.S. session. Track them as inputs to your system rather than as prompts to chase any single headline.
0
0
This week: freeze your credit at every bureau and store the credentials where you will find them
This is one of the few financial chores with a genuinely good ratio of effort to protection. It is free, it is reversible, and it blocks an entire category of harm that is otherwise miserable to unwind. Most people who have not done it are not weighing it against something else. They just have not sat down for the twenty minutes. The steps. Identify each of the major credit bureaus and handle them one at a time, because a freeze placed at one does nothing at the others and a lender pulling from an unfrozen bureau proceeds as normal. Go to each bureau's site by typing the address rather than searching, since search results for these terms attract look-alikes selling paid monitoring you do not need. Create the account, verify your identity, place the freeze. Then immediately record whatever PIN or credential you are issued somewhere durable, because you will need it in some future year to lift the freeze and you will not remember where you put it. While you are in each account, take the extra minute to read the file itself. You are looking for accounts you do not recognize, addresses that are not yours, and inquiries you cannot explain. This is a different check from the freeze, and it answers a different question: the freeze protects the future, the file describes the past. Finding something odd is not an emergency, but it is the start of a dispute you would much rather begin now than discover later. Two things worth knowing so the freeze does not surprise you. It does not affect your existing accounts or your score, so nothing you currently use stops working. And it will block a legitimate application too, which means if you are about to apply for something, you lift it temporarily, usually within minutes, and then it goes back on. If anyone else's finances depend on you, consider doing the same for them, including for children and for anyone whose affairs you manage, because those files are attractive precisely because nobody is watching them. Have you already frozen your credit files, and if not, what has actually been stopping you from spending the twenty minutes on it?
0
0
1-10 of 910
Andrew Lang
5
346 points to level up
@andrew-lang-4295
Obsidian Metrics is your go-to source for mastering the tools that power modern finance.

Active 10h ago
Joined Mar 24, 2026