News for hackers. Stuff that matters.

A comment on We'd lose our security certificate if we allowed pasting. Parent comment

Re:We'd lose our security certificate if we allowed pasting by Kudos on Tuesday May 06, 2014 @08:50AM (#7704084)
That's nothing, mine's a 5 digit pin code which they only validate 3 of in a random order (to annoy keyloggers, I assume) plus the last 4 digits of my phone number.

Edit: This feels like the scene where Mel Gibson and Rene Russo compare scars in Lethal Weapon 3.

[ Parent | on HN ]
Re:We'd lose our security certificate if we allowed pasting by damon_c on Tuesday May 06, 2014 @09:47AM (#7704377)
"This feels like the scene where Mel Gibson and Rene Russo compare scars in Lethal Weapon 3."

You might also refer to the scene from Jaws(1975) where Hooper and Quint compare scars: http://www.rowthree.com/2011/10/18/finite-focus-competitive-...

[ Parent | on HN ]
Re:We'd lose our security certificate if we allowed pasting by dave84 on Tuesday May 06, 2014 @08:58AM (#7704117)
Sounds like AIB. If you use the app they don't even ask for the last 4 digits of your phone number.
[ Parent | on HN ]
Re:We'd lose our security certificate if we allowed pasting by Kudos on Tuesday May 06, 2014 @10:04AM (#7704484)
Bingo. I wonder what their brute force protection is like, but I'm not going to go pentesting the login of a company I'm in the same legal jurisdiction as.
[ Parent | on HN ]
Re:We'd lose our security certificate if we allowed pasting by sp332 on Tuesday May 06, 2014 @10:45AM (#7704763)
Well if you don't cross state lines, they're less likely to get the FBI involved...
[ Parent | on HN ]
Re:We'd lose our security certificate if we allowed pasting by Kudos on Wednesday May 07, 2014 @04:36PM (#7712515)
It's an Irish bank, which means I won't be crossing any state lines ;)
[ Parent | on HN ]
Re:We'd lose our security certificate if we allowed pasting by maaarghk on Tuesday May 06, 2014 @09:00AM (#7704121)
Yeah, similarly, Lloyds/HBOS in the UK do allow you to have a master password but you also need to fill out a "memorable information" where you select 3 random characters from a second password. But you don't type them, you select them from a drop down. I can see how this would annoy the most basic of keyloggers but it is also a UX disaster and not suitable for decent loggers. Pisses me off.
[ Parent | on HN ]