Banks, Arbitrary Password Restrictions and Why They Don't Matter

Re:Banks, Arbitrary Password Restrictions and Why They Don't... by berdon on Wednesday September 18, 2019 @10:43AM (#21005927)

I've had the opportunity to chat with many ex-bank developers and based on those discussions I'm as positive as I can be, without my own personal experience, that this is assuredly utter garbage.

The last two I've spoken with had read-only access to _everything_. The entire company did.

[ Parent | on HN ]

Re:Banks, Arbitrary Password Restrictions and Why They Don't... by jen729w on Wednesday September 18, 2019 @04:06PM (#21009503)

I’ve worked at 2 of the 4 major banks here in Australia and I’m calling bull on that last statement.

The entire company had read-only access to everything? Yeah nah. Who put the Siebel client on Janice the HR lady’s laptop? Who created an account on the mainframe for Barry the bloke who re-stocks the milk in the fridge?

You get my point.

[ Parent | on HN ]

Re:Banks, Arbitrary Password Restrictions and Why They Don't... by berdon on Thursday September 19, 2019 @09:58AM (#21016205)

I was a bit exaggerative - the entire "development" arm of the bank had read only access to all customer financial data. One of the devs was a customer and pulled up all of his information.

[ Parent | on HN ]

Re:Banks, Arbitrary Password Restrictions and Why They Don't... by cyphar on Wednesday September 18, 2019 @06:18PM (#21010943)

I think they meant that the last two ex-employees they spoke to had read-only access to everything, not that every employee at a given bank had access to everything.

[ Parent | on HN ]