Tag Info

New answers tagged

1

I agree that most Europeans will see their IBAN as private data and want them to be encrypted. But there is another compelling reason to encrypt and sign the IBANs: A man-in-the middle attacker may maliciously alter them to receive the money you want to pay off. So you should protect any IBAN against this threat.


6

One of the reasons that banks often have case insensitivity in their passwords is because of phone banking: banks existed FAR before the internet existed, even before telephones were a thing. So once telephones became widespread, many major banks allowed people to to banking stuff via the telephone. it makes sense: all you need is two account numbers and a ...


14

Typically, it is a choice between usability and security. Users have a surprising amount of trouble with capitals in password so capitalizing password before hashing them makes it easier on the user. Of course, that also decreases the maximum entropy of a password of a given length. To compensate, you should use longer passwords... If you're lot limited to ...


31

The most likely reason is that the backend only supports case-insensitive passwords. To quote OWASP: Occasionally, we find systems where passwords aren't case sensitive, frequently due to legacy system issues like old mainframes that didn't have case sensitive passwords. The chances of this happening are much higher with stodgy old institutions ...


0

Any system can be compromised if not used carefully. As others have said, if the phone is rooted and apps are installed that do contain exploits then a risk exists for information to be captured from the various interfaces on the device because the device itself can no longer be "trusted." Some apps can contain malware and viruses such as the free ...


-3

Windows 7/8/8.1 will be massively safer than android as they still get security updates from microsoft, android is a complete mess for security, there is a few problems. 1 - google do not support android for very long, a recent exploit they announced wont be patched in 4.3 and older, 4.3 was not even 12 months old when they announced this. Microsoft ...


0

I think it is here, under 1020.410 (i), which states: If the originator's bank has knowledge that the person placing the payment order is not the originator, the originator's bank shall obtain and retain a record of the originator's taxpayer identification number (e.g., social security or employer identification number) or, if none, alien identification ...


2

Currently, the only way to protect against ACH are detective controls which should be in place at the business and the bank. Most fraud gets detected after accounts get reconciled or after a customer complains that his account was used without authorization. In case of a bank, if a company only uses it for payroll payments and those payments occur once a ...



Top 50 recent answers are included