Online Banking: Widespread Security Flaws Revealed

[Thankful]

http://www.livescience.com/technology/080723-online-banking.html

[dw426]

Yeah well, this is what happens when you move everything over to computers and then put money and time over security. As I said in another thread: Welcome to the Digital Age! It's just going to get worse folks *scurries back to nuke-proof shelter*

[Carver]

I've noticed gliches, seletion boxes that lead to the wrong section or just a blank page. I've had account information filled in with info from 6 months before and more. I've reported the mess in detail, all I got for my effort was "What are you talking about" and a list of things I could be doing wrong. I guess the banks have to straighten out their own mess, but how can the banks do that without some one pointing out their mistakes.

[dw426]

-{ Quote: "I've noticed gliches, seletion boxes that lead to the wrong section or just a blank page. I've had account information filled in with info from 6 months before and more. I've reported the mess in detail, all I got for my effort was "What are you talking about" and a list of things I could be doing wrong. I guess the banks have to straighten out their own mess, but how can the banks do that without some one pointing out their mistakes." }-

They've had warnings, just as every other business has, but again, time is money, neither of which they want to part with. Also, in many cases, the staff doesn't even know how to operate the software they use beyond a few buttons. That happens a LOT in business.

[ccsito]

Some of the bank websites that I have come across look very primitive. I wonder who designed this thing??? Obviously, it was someone who probably just got a job as a newbie web designer. LOL Banks hire people to make and maintain a user friendly interface site. The banks main focus is not on how secure the site is, the main focus is the $$$ generated. :isay:

[dw426]

-{ Quote: "Some of the bank websites that I have come across look very primitive. I wonder who designed this thing??? Obviously, it was someone who probably just got a job as a newbie web designer. LOL Banks hire people to make and maintain a user friendly interface site. The banks main focus is not on how secure the site is, the main focus is the $$$ generated. :isay:" }-

Users regardless of the business involved are always secondary to shiny coins and crisp bills.

[ccsito]

-{ Quote: "Users regardless of the business involved are always secondary to shiny coins and crisp bills." }-

You have to realize that if no moola was transacted on the WWW, virtually all of the online businesses would disappear and all things would go back to a BBS framework and text formatting. ;)

[dw426]

-{ Quote: "You have to realize that if no moola was transacted on the WWW, virtually all of the online businesses would disappear and all things would go back to a BBS framework and text formatting. ;)" }-

Not saying the world would be easier without tech, just saying the more we rely on tech to run the world, the easier it becomes to have the whole thing come crashing down ;)

[ccsito]

-{ Quote: "Not saying the world would be easier without tech, just saying the more we rely on tech to run the world, the easier it becomes to have the whole thing come crashing down ;)" }-
Hollywood has produced many movies with this theme. E.G., 1984. ;)

[dw426]

-{ Quote: "Hollywood has produced many movies with this theme. E.G., 1984. ;)" }-

Orwell so far wasn't too far off the mark.

[Mrkvonic]

Except the hero and revolution at the end of every one?
Mrk

[sukarof]

-{ Quote: "A hacker (http://www.livescience.com/technology/080619-chinese-hackers.html) could reroute data entered in the boxes or create a spoof copy of the page to harvest information. " }-

I cant understand why there are still banks that uses codes to login....
Three years ago when my bank offered me to buy a card reader (for the credit card) with a certificate I got it. I believe it is much more secure and it is much faster to use than codes.

[dw426]

-{ Quote: "Except the hero and revolution at the end of every one?
Mrk" }-

Yeah, well, that part is for the movies. Don't look for the bulky guy that saves the world and gets the girl to get us out of where we're headed.

@Sukarof: I don't get why they still use passwords and such either. Of course (and I ask because I've no idea), would it not be possible to steal the information using a fake website, even with the card reader?

[vernonls]

Secret questions seem to be the in-vogue feature of today's online banking security. My question is - Now that I am revealing all manner of answers to questions that only I am likely to know, how is that information safeguarded by banks? Is it encrypted all the time? Can the sys-admin read it? Is it ever printed? Is it ever exchanged with third parties?

Does anyone have answers to questions like these?

Thanks,

Vern

[bellgamin]

Paypal's little electronic gadget works very well. I have one. When I log into Paypal, I must first give my user name & password, then I am asked to press the button on the little electronic gadget they sent me, & enter the unique pass-number it produces. That number changes with every button-press.

Dadgummed good security!:thumb: