The banks tag has no wiki summary.
17
votes
3answers
1k views
Could my bank's two-factor authentication be hacked?
When I attempt to log in to my bank, an SMS code is sent to my phone. I then type this nine-character code into the bank's Web site, to login to my account.
Is this vulnerable to attack, without ...
6
votes
0answers
195 views
Web Authentication using PKI Certs [migrated]
I understand PKI reasonably well from a conceptual point of view - i.e. private keys/public keys - the math behind them, use of hash & encryption to sign a certificate, Digital Signing of ...
4
votes
2answers
129 views
Online banking proof of transaction for vertification in court
So, when i do an online payment transaction i "sign" my transaction with my digipass using some sort of a MAC (HMAC) with a shared key and some information that is unique for this transaction.
But ...
6
votes
4answers
362 views
Banking application login leaks information
My question is regarding the online banking application of a large credit card organisation. The login process for this application works as follows:
User visits the homepage of the bank.
User ...
0
votes
1answer
118 views
Where is RSA Digital signature used in the online banking world?
When i do online banking, i sign my digital transaction with a digipass. Ive been told that it uses a RSA-based digital signature scheme. But an rsa digital signature (1024 bit for the modulus) is a ...
0
votes
0answers
59 views
Any reference to this old ATM fault (collecting one of the notes before the rest will be taken back) [closed]
For an article I am writing, I would need to know if this fault was also in other countries and if so, I would really appreciate ANY link to newspaper/whatever so I can prove it.
It is an old fault ...
52
votes
10answers
3k views
Does disabling right click have any impact on security?
On a banking website I see that they have disabled right-click. Does that make the site any more secure? Is it a good general practice?
6
votes
4answers
3k views
How is Chase Mobile Deposit Secure?
Chase has this app that allows you to snap a picture of a check with your phone and deposit that check into your account.
How do they prevent:
Someone from depositing a check that's not written to ...
3
votes
3answers
148 views
What security factors should I take into consideration when selecting a bank?
I've gotten fed up with my bank and have made the decision to move all of my banking elsewhere. This is a rare occurrence for me and, I suspect, for other people as well. It represents an opportunity ...
4
votes
4answers
378 views
Offline brute-forcing of a bank card PIN
I may be neglecting a crucial fact here, but putting the following together leads me to believe it is dead-easy to determine a bank card's PIN using the most basic hardware available to everyone (I ...
15
votes
4answers
552 views
My credit union is reducing its maximum password length to 10 characters
I just received an email from my credit union saying they are redesigning their online banking service and that I will need to change my password by October 22 to conform to the new limit of 10 ...
10
votes
3answers
1k views
How does HSBC's “Secure Key” actually work?
My bank has recently sent me a Digipass/Secure Key, which looks like a tiny calculator. You press the green button to turn it on, type a PIN to unlock it, then press the green button again to generate ...
5
votes
3answers
428 views
Bank forces me to use six character alphanumeric password
My bank (it's Westpac, one of the big ones in Australia) has some strange restrictions on passwords. They're maximum 6 characters in length and it must contain only characters A-Z and digits 0-9, and ...
9
votes
2answers
432 views
My bank makes me enter my password using the mouse. What's up with that?
Internet banking login process for Westpac requires user to enter the password using the mouse. It's annoying, what's up with that? Is it just to try and stop keyloggers on public computers or is ...
