Two Canadian banks say accounts compromised: CIBC 40,000 and BMO 50,000

Re:Two Canadian banks say accounts compromised: CIBC 40,000 ... by mikeash on Tuesday May 29, 2018 @09:20AM (#17178868)

My bank has a password length limit of 8 characters.

Do they throw up an error? No, they silently truncate it.

The cherry on top is that it’s also case insensitive.

I stick with them because they’re good otherwise and they make it clear that they take responsibility for any losses due to this nonsense. But holy crap, “bank grade security” is definitely not a positive thing in my eyes.

[ Parent | on HN ]

Re:Two Canadian banks say accounts compromised: CIBC 40,000 ... by p0rks on Tuesday May 29, 2018 @10:09AM (#17179289)

I feel the term "bank grade security" used to mean something before we were banking online. "Bank grade security" conjures images of actually having to physically go to your bank and then having your money stored in a vault.

Def not the case anymore.

There is no cloud, just other people's computers.

[ Parent | on HN ]