Ask HN: A major USA bank is storing passwords in cleartext

Re:Ask HN: A major USA bank is storing passwords in cleartex... by chris_overseas on Tuesday February 18, 2020 @09:14AM (#22356166)

Well Westpac had an onscreen keyboard for the password entry too until about 18 months ago. When they finally replaced it with a (thankfully password-safe friendly) text box they had this to say:

"At Westpac, we are continually striving to provide the highest quality service and security to help support our Online Banking customers.

From the end of May 2018, we will be removing the keypad from the online sign-in screen and replacing it with an open text box, which allows you to type in your Customer ID and password.

...

Security Guarantee. We assure you that using the open text box to enter your sign-in details carries the same high level of security ..."

Passwords remained fixed at 6 characters however.

[ Parent | on HN ]

Re:Ask HN: A major USA bank is storing passwords in cleartex... by loeg on Tuesday February 18, 2020 @11:48AM (#22357360)

The US treasury does/did this on-screen keyboard thing as well (at least up until I stopped needing to login to that website within the last year or two). The "best" method I had around it was to copy the password out of my manager, use developer tools to find the '<input type="password">' element, and add 'value="[paste]"' manually.

[ Parent | on HN ]

Re:Ask HN: A major USA bank is storing passwords in cleartex... by manmademagic on Wednesday February 19, 2020 @07:52AM (#22364985)

I used to bank with WestPac and from memory it wasn’t possible to do this as they had some additional javascript running that would cipher every letter.

[ Parent | on HN ]