Ask HN: A major USA bank is storing passwords in cleartext

Re:Ask HN: A major USA bank is storing passwords in cleartex... by tqkxzugoaupvwqr on Tuesday February 18, 2020 @06:32AM (#22355171)

Reminds me of TSB (UK bank) that asks, in addition to username and password, for three characters of a string when you sign in. Which is stupid because you can’t do it in your head easily. You actually need to see it written down somewhere when they ask for the 3rd, 11th and 15th character of that “memorable information”.

[ Parent | on HN ]

Re:Ask HN: A major USA bank is storing passwords in cleartex... by deadbunny on Tuesday February 18, 2020 @08:39AM (#22355936)

Pretty sure all UK banks use this method. For a while a tried to use a complex password for this, it became so annoying to use it is now a simple password that I can remember easily and count out. Like a downgrade attack on my brain.

[ Parent | on HN ]

Re:Ask HN: A major USA bank is storing passwords in cleartex... by e2le on Tuesday February 18, 2020 @08:55AM (#22356046)

For the "memorable information", I use a 32 character string that was generated with pwgen. I don't ever remember it asking me for the 25th or 30th character, it's always within the first 20 characters.

[ Parent | on HN ]