The banks tag has no wiki summary.
0
votes
0answers
28 views
Online Service for Storage of Bank Account Info? [on hold]
For obvious reasons, I do not want to store any bank account information on my servers.
However, my site does need to collect this information from contractors so we can pay them via direct ...
5
votes
1answer
118 views
Why does my bank bother asking basic personal questions to log in to online banking?
To log into my online banking, I have to answer a basic personal question such as "What is your mother's maiden name" or "What is your grandfather's middle name", as well as enter a one-time code from ...
4
votes
1answer
72 views
Should IBAN and bank details be considered private data and encrypted?
To pay off our users, they are asked to enter their IBAN and bank name and bank address. The users are mostly based in Europe.
As far as I know (see also this question) these details can not be used ...
1
vote
1answer
59 views
Home banking site request, it possible for a small web agency?
I'm working in a web agency, i have a request to made an home banking system for a little bank. I'm searching in internet for some information about security and a good pattern to start, but naturally ...
0
votes
1answer
40 views
International bank transfer, what is safe to share?
Okay, so I am selling a smartphone, to the guy who lives in UK, or that is what he says. So for the money transfer he asks me these things.
Name
Bank Name
Account Number
Iban
Swift Code.
Is it ...
-1
votes
1answer
50 views
Potential damage of someone getting your online banking password [closed]
Does anyone have thoughts on the potential damage of your online banking account being hacked? I'm not sure what a person could actually do since I think they could really only pay my bills (adding a ...
0
votes
1answer
79 views
Banking platform accepts password containing subset of real password [duplicate]
How would it be possible that if my password was 123abc that my bank also accepts something like 123abc12?
Isn't that an extreme security flaw? If the password was hashed and salted, wouldn't the ...
4
votes
4answers
241 views
Signature instead of PIN, Visa card
Most of the credit cards require PIN to authorize transaction. Recently upon a transaction the merchant required my signature and not my PIN. I understand this is another sort of authorizing the ...
0
votes
1answer
95 views
Is it possible that the same VISA debit card numbers could be issued to different people by different banks? [closed]
I'm wondering if is it possible that the same VISA debit card numbers could ever be issued to different people by different banks or companies?
0
votes
1answer
45 views
Do normal SMS risks apply to DigiCel mobile banking? What mitigations are likely in place?
In this interview with Bill Gates and Bill Clinton, they discuss their work with Digicel, who I assume is this company, to enable mobile banking with normal KYC protections.
This site is full of ...
1
vote
2answers
92 views
How safe is Money Toolkit?
Money Toolkit is a smartphone app that can alert you to your balances and transactions across multiple accounts.
I was reading their site and whether their practises are as secure as they claim to ...
0
votes
2answers
134 views
Why do some websites increase the number of characters in the password field when logging in?
Why do some websites (especially banking sites) display more characters in the password field than were actually typed? This is sometimes apparent just after clicking the login button.
0
votes
2answers
246 views
Bank Fraud Deposit
My daughter just discovered yesterday that a wire transfer of $12K had been made to her checking acct. at Chase. It said it came from a Wells Fargo in NY in the name of some name she didn't ...
-1
votes
1answer
249 views
What are the security implications of the POLi Internet Payments technique?
POLi Payments is an Australian based online payment provider which has begun trading in New Zealand. They are supported as a payment option on some large eCommerce websites in New Zealand, including ...
2
votes
5answers
263 views
Is accepting old passwords a bad policy?
This question is inspired by an experience I had today with online banking, as follows.
One year ago I opened an online deposit account. (Without naming the bank, I will say the company is currently a ...
17
votes
3answers
2k views
Could my bank's two-factor authentication be hacked?
When I attempt to log in to my bank, an SMS code is sent to my phone. I then type this nine-character code into the bank's Web site, to login to my account.
Is this vulnerable to attack, without ...
4
votes
2answers
256 views
Online banking proof of transaction for vertification in court
So, when i do an online payment transaction i "sign" my transaction with my digipass using some sort of a MAC (HMAC) with a shared key and some information that is unique for this transaction.
But ...
0
votes
1answer
248 views
Where is RSA Digital signature used in the online banking world?
When i do online banking, i sign my digital transaction with a digipass. Ive been told that it uses a RSA-based digital signature scheme. But an rsa digital signature (1024 bit for the modulus) is a ...
55
votes
10answers
4k views
Does disabling right click have any impact on security?
On a banking website I see that they have disabled right-click. Does that make the site any more secure? Is it a good general practice?
8
votes
5answers
8k views
How is Chase Mobile Deposit Secure?
Chase has this app that allows you to snap a picture of a check with your phone and deposit that check into your account.
How do they prevent:
Someone from depositing a check that's not written to ...
6
votes
4answers
429 views
Banking application login leaks information
My question is regarding the online banking application of a large credit card organisation. The login process for this application works as follows:
User visits the homepage of the bank.
User ...
3
votes
3answers
178 views
What security factors should I take into consideration when selecting a bank?
I've gotten fed up with my bank and have made the decision to move all of my banking elsewhere. This is a rare occurrence for me and, I suspect, for other people as well. It represents an opportunity ...
4
votes
4answers
809 views
Offline brute-forcing of a bank card PIN
I may be neglecting a crucial fact here, but putting the following together leads me to believe it is dead-easy to determine a bank card's PIN using the most basic hardware available to everyone (I ...
12
votes
3answers
6k views
How does HSBC's “Secure Key” actually work?
My bank has recently sent me a Digipass/Secure Key, which looks like a tiny calculator. You press the green button to turn it on, type a PIN to unlock it, then press the green button again to generate ...
15
votes
4answers
940 views
My credit union is reducing its maximum password length to 10 characters
I just received an email from my credit union saying they are redesigning their online banking service and that I will need to change my password by October 22 to conform to the new limit of 10 ...
5
votes
3answers
696 views
Bank forces me to use six character alphanumeric password
My bank (it's Westpac, one of the big ones in Australia) has some strange restrictions on passwords. They're maximum 6 characters in length and it must contain only characters A-Z and digits 0-9, and ...
8
votes
2answers
543 views
My bank makes me enter my password using the mouse. What's up with that?
Internet banking login process for Westpac requires user to enter the password using the mouse. It's annoying, what's up with that? Is it just to try and stop keyloggers on public computers or is ...
