The banks tag has no wiki summary.
9
votes
6answers
1k views
What methods can be used to prevent mistyped usernames?
I wanted to log on to my account on my bank's website. The account is protected by a number of security checks. The first one is what really amounts to a username, a confidential one. It's an 8-digit ...
1
vote
4answers
195 views
Why do banking websites always log you out after inactivity?
It seems that every single banking & financial website that I have used logs me out after a certain period of time.
Are there a legal requirements or technical reasons for financial sites to do ...
-4
votes
2answers
133 views
Windows XP has many security vulnerabilities, So why many bank using Windows XP until now? [closed]
I know many banks using Windows XP on almost computers for staff working, WinXP has many security vulnerabilities. But rarely seriously problems occured with thier system.
Is there good Firewall and ...
5
votes
1answer
141 views
Why does my bank bother asking basic personal questions to log in to online banking?
To log into my online banking, I have to answer a basic personal question such as "What is your mother's maiden name" or "What is your grandfather's middle name", as well as enter a one-time code from ...
4
votes
1answer
87 views
Should IBAN and bank details be considered private data and encrypted?
To pay off our users, they are asked to enter their IBAN and bank name and bank address. The users are mostly based in Europe.
As far as I know (see also this question) these details can not be used ...
1
vote
1answer
60 views
Home banking site request, it possible for a small web agency?
I'm working in a web agency, i have a request to made an home banking system for a little bank. I'm searching in internet for some information about security and a good pattern to start, but naturally ...
0
votes
1answer
49 views
International bank transfer, what is safe to share?
Okay, so I am selling a smartphone, to the guy who lives in UK, or that is what he says. So for the money transfer he asks me these things.
Name
Bank Name
Account Number
Iban
Swift Code.
Is it ...
-1
votes
1answer
59 views
Potential damage of someone getting your online banking password [closed]
Does anyone have thoughts on the potential damage of your online banking account being hacked? I'm not sure what a person could actually do since I think they could really only pay my bills (adding a ...
0
votes
1answer
84 views
Banking platform accepts password containing subset of real password [duplicate]
How would it be possible that if my password was 123abc that my bank also accepts something like 123abc12?
Isn't that an extreme security flaw? If the password was hashed and salted, wouldn't the ...
4
votes
4answers
271 views
Signature instead of PIN, Visa card
Most of the credit cards require PIN to authorize transaction. Recently upon a transaction the merchant required my signature and not my PIN. I understand this is another sort of authorizing the ...
0
votes
1answer
107 views
Is it possible that the same VISA debit card numbers could be issued to different people by different banks? [closed]
I'm wondering if is it possible that the same VISA debit card numbers could ever be issued to different people by different banks or companies?
0
votes
1answer
59 views
Do normal SMS risks apply to DigiCel mobile banking? What mitigations are likely in place?
In this interview with Bill Gates and Bill Clinton, they discuss their work with Digicel, who I assume is this company, to enable mobile banking with normal KYC protections.
This site is full of ...
2
votes
2answers
95 views
How safe is Money Toolkit?
Money Toolkit is a smartphone app that can alert you to your balances and transactions across multiple accounts.
I was reading their site and whether their practises are as secure as they claim to ...
0
votes
2answers
140 views
Why do some websites increase the number of characters in the password field when logging in?
Why do some websites (especially banking sites) display more characters in the password field than were actually typed? This is sometimes apparent just after clicking the login button.
0
votes
2answers
293 views
Bank Fraud Deposit
My daughter just discovered yesterday that a wire transfer of $12K had been made to her checking acct. at Chase. It said it came from a Wells Fargo in NY in the name of some name she didn't ...
-1
votes
1answer
309 views
What are the security implications of the POLi Internet Payments technique?
POLi Payments is an Australian based online payment provider which has begun trading in New Zealand. They are supported as a payment option on some large eCommerce websites in New Zealand, including ...
2
votes
5answers
273 views
Is accepting old passwords a bad policy?
This question is inspired by an experience I had today with online banking, as follows.
One year ago I opened an online deposit account. (Without naming the bank, I will say the company is currently a ...
17
votes
3answers
2k views
Could my bank's two-factor authentication be hacked?
When I attempt to log in to my bank, an SMS code is sent to my phone. I then type this nine-character code into the bank's Web site, to login to my account.
Is this vulnerable to attack, without ...
4
votes
2answers
276 views
Online banking proof of transaction for vertification in court
So, when i do an online payment transaction i "sign" my transaction with my digipass using some sort of a MAC (HMAC) with a shared key and some information that is unique for this transaction.
But ...
0
votes
1answer
266 views
Where is RSA Digital signature used in the online banking world?
When i do online banking, i sign my digital transaction with a digipass. Ive been told that it uses a RSA-based digital signature scheme. But an rsa digital signature (1024 bit for the modulus) is a ...
55
votes
10answers
4k views
Does disabling right click have any impact on security?
On a banking website I see that they have disabled right-click. Does that make the site any more secure? Is it a good general practice?
8
votes
5answers
8k views
How is Chase Mobile Deposit Secure?
Chase has this app that allows you to snap a picture of a check with your phone and deposit that check into your account.
How do they prevent:
Someone from depositing a check that's not written to ...
6
votes
4answers
439 views
Banking application login leaks information
My question is regarding the online banking application of a large credit card organisation. The login process for this application works as follows:
User visits the homepage of the bank.
User ...
3
votes
3answers
183 views
What security factors should I take into consideration when selecting a bank?
I've gotten fed up with my bank and have made the decision to move all of my banking elsewhere. This is a rare occurrence for me and, I suspect, for other people as well. It represents an opportunity ...
4
votes
4answers
897 views
Offline brute-forcing of a bank card PIN
I may be neglecting a crucial fact here, but putting the following together leads me to believe it is dead-easy to determine a bank card's PIN using the most basic hardware available to everyone (I ...
12
votes
3answers
7k views
How does HSBC's “Secure Key” actually work?
My bank has recently sent me a Digipass/Secure Key, which looks like a tiny calculator. You press the green button to turn it on, type a PIN to unlock it, then press the green button again to generate ...
15
votes
4answers
963 views
My credit union is reducing its maximum password length to 10 characters
I just received an email from my credit union saying they are redesigning their online banking service and that I will need to change my password by October 22 to conform to the new limit of 10 ...
5
votes
3answers
746 views
Bank forces me to use six character alphanumeric password
My bank (it's Westpac, one of the big ones in Australia) has some strange restrictions on passwords. They're maximum 6 characters in length and it must contain only characters A-Z and digits 0-9, and ...
8
votes
2answers
552 views
My bank makes me enter my password using the mouse. What's up with that?
Internet banking login process for Westpac requires user to enter the password using the mouse. It's annoying, what's up with that? Is it just to try and stop keyloggers on public computers or is ...
