News for hackers. Stuff that matters.
Re:CapitalOne has the most secure password system by LeoPanthera on Friday April 24, 2015 @03:00PM (#9435369)
In my experience, most UK banks do the same thing. Their excuse is that it prevents keylogger attacks. I do not know enough to say whether it's an acceptable trade-off or not.
Re:CapitalOne has the most secure password system by adrianpike on Friday April 24, 2015 @03:03PM (#9435389)
Seeing as I've been the victim of a half dozen or so password leaks, one credit card clone, and not a single keylogger attack, I'd probably err on the side of secure password storage, but that's just me.
Re:CapitalOne has the most secure password system by cerocool on Friday April 24, 2015 @04:29PM (#9435835)
Meanwhile, users actually type full password into the username field so they find the required characters by index, then delete it before submitting the form.