Two Canadian banks say accounts compromised: CIBC 40,000 and BMO 50,000

Re:Two Canadian banks say accounts compromised: CIBC 40,000 ... by kevin_nisbet on Monday May 28, 2018 @10:13PM (#17175967)

It's even better than that, to login to the tangerine website, you first enter you're username, and it returns back a picture and phrase you pre-select, before entering you're pin.

When showing you the picture and phrase: >Important: If you don't recognize or see your picture and phrase, don't enter your PIN. First check that you entered the correct information. If you're still unsure, call 1-888-SAFE(7233)-304.

Anyone care to guess my username, and steal my picture and phrase?

[ Parent | on HN ]

Re:Two Canadian banks say accounts compromised: CIBC 40,000 ... by YZF on Tuesday May 29, 2018 @12:39AM (#17176541)

It's meant to be a very crude protection against entering your PIN on a site pretending to be Tangerine. Yeah, it's pretty dumb.

[ Parent | on HN ]

Re:Two Canadian banks say accounts compromised: CIBC 40,000 ... by dade_ on Tuesday May 29, 2018 @08:20AM (#17178433)

As I recall from opening my account in the 90's the photo feature was always there. It was "forward thinking" at the time, but I can't say they have kept up that pace.

[ Parent | on HN ]