News for hackers. Stuff that matters.

A comment on HTTPS on Your Landing Page Is Important. Parent comment

Re:HTTPS on Your Landing Page Is Important by MiddleEndian on Wednesday December 13, 2017 @08:37PM (#15919320)
Guess what! If your financial service restricts your password to letters and numbers, it's most likely because they want you to be able to enter your password on the phone.

So the passwords 'abc' 'ABC' and '222' are treated as equivalent. Try it out for fun!

[ Parent | on HN ]
Re:HTTPS on Your Landing Page Is Important by ktta on Wednesday December 13, 2017 @10:19PM (#15919687)
What banks do this? AFAIK, Wells Fargo doesn't care about case-sensitivity but that's it.
[ Parent | on HN ]
Re:HTTPS on Your Landing Page Is Important by sunsetMurk on Wednesday December 13, 2017 @10:18PM (#15919682)
that's disgusting :-/
[ Parent | on HN ]
Re:HTTPS on Your Landing Page Is Important by exabrial on Thursday December 14, 2017 @12:08PM (#15924043)
/that noise when your head hits the desk
[ Parent | on HN ]
Re:HTTPS on Your Landing Page Is Important by ozim on Thursday December 14, 2017 @07:29AM (#15921738)
I don't want to enter my password on the phone, I have fingerprint or pin in mobile banking app.
[ Parent | on HN ]
Re:HTTPS on Your Landing Page Is Important by Frank2312 on Thursday December 14, 2017 @10:32AM (#15923013)
He meant over the phone, not on a phone.

Ex : I call my bank and I have to go through a menu leading me to the right agent. Eventually, it asks for my password over the phone that I need to type using the 10 numbers on a phone dial.

Good luck using your fingerprint there :)

[ Parent | on HN ]
Re:HTTPS on Your Landing Page Is Important by ozim on Thursday December 14, 2017 @11:36AM (#15923648)
For that i have separate numeric only password in my bank which is different than my web login password. So bank is saving couple of bucks to reuse same weak password that can be stolen on web and then used by attacker to authenticate as me over the phone. What a crappy bank. I am just happy that bank that I use is having all set better.
[ Parent | on HN ]
Re:HTTPS on Your Landing Page Is Important by chrisshroba on Thursday December 14, 2017 @09:18AM (#15922368)
Source?
[ Parent | on HN ]