I have just discovered that I can login to my bank with passwords that is not mine.
My password is "1234" but I am authorized with all possible post characters. For example "12345" or "12341234" will authorize me.
Also note that my password was assigned to me by the bank (four digits) and the login is a normal html form (username input type text/password input type password)
Why would any bank design such a auth protocol and is this something I should worry about?