71–80 of 89 posts
I liked this JS function one of the JS files in that page, specially the name of the cookie "Gabbar": function fun() { var new_dte= new Date(2005,1,1); setCookie("Gabbar","#!#0",new_dte); setCookie("hitsscore",hitsscore+"~",new_dte); }
Earlier quoted context omitted.
They might be running AS/400 as their backend systems, I recently saw a terminal to one of those in a bank and to my shocking surprise the passwords were not even encrypted on that system. I imagine that passwords are kept in the same database as transactions so I'm not sure the passwords would be the primary concern in the case of a break in.
The frontend part can still use a secure password mechanism which is then hashed to a password suitable for the underlying backend system. There's no reason to keep the bad decisions from decades ago as a part of a modern system, even if it relies on the legacy system.
If your sending bulk email, your not going to be getting delivery unless your process these messages from the large web mail providers.
I am actually surprised that they aren't required by law to have either a 1 click unsubscribe or at the very worst, require you to enter your email address into the form and click a button. This is the way that the us CANSPAM act and the australian spam act work.
Citibank is one of the worst banks I've dealt with. Once, one of their affiliate's employees offered me a Credit Card for free and said "it had no strings attached" and I don't need to do anything to keep it alive. Thought it sounded too good to be true, I bit the bullet and signed up, right on the spot, their affiliate clothing store. Before I was about to submit my documents, it was then I happened to meet a friend…
This is a phishing attack waiting to happen! I never worked at a bank but I'm assuming (maybe I shouldn't) that there are a few people working there that know a thing or two about security. I doubt that any person who claims to be a "security expert" would have let this go by, but I always seemed to be proven wrong. Take for example TDBank in Canada who has a 80's password policy: Passwords must: - be 5 to 8 characte…
My bank requires a 4 character password with no letters or special characters! Oh wait, a PIN doesn't count?
Citibank is one of the worst banks I've dealt with. Once, one of their affiliate's employees offered me a Credit Card for free and said "it had no strings attached" and I don't need to do anything to keep it alive. Thought it sounded too good to be true, I bit the bullet and signed up, right on the spot, their affiliate clothing store. Before I was about to submit my documents, it was then I happened to meet a friend…
Which country was this in? India?
The problem is that there is massive trust deficit. Public too is keen to cheat whenever a loophole exists due to simplified procedures. That invites even harsher regulation and the cycle of submitting 10 documents where 1 would be suffice continues. There are endless certificates and NOCs (no-objection certifcates) required to operate in India: Aadhar citizen number, PAN number, TAN number, Service Tax number, Excise registration, LBT registration, Domicile, 7/12 extracts, 20 year old vouchers for LPG gas cylinders, nationality...and so it goes. Also, there is very little belief about who you are and where you live. So for everything an address proof is required apart from an ID.
Any wonder that there are no ground-level start-up stories from India. All that we can do is morph into HSFC (Human Services for Cheap) model to serve the rich western countries who want to off-load their guilt of wanting modern 'e-slaves' in the post-industrial world but not being able to fund their liabilities.
Earlier quoted context omitted.
Forging your signature is illegal!
Its illegal but legal system is so bad that a person who openly swindled 25 billion-dollard in 5 years is going to become a ruler of a province...He will literally buy votes with the money.
Earlier quoted context omitted.
My bank (NatWest, terrible) told me to never give my information to anyone who calls me and asks for it. Every time they ring they then ask me for my details for 'security purposes'. Then again, that seems mild now that I've found out they don't keep auditing logs of the changes their employees make to customers' accounts. There are also lots of cases of online banking being compromised by really basic attacks (such…
Banks aren't actually that secure. Financial services generally aren't in the business of security. They're in the business of risk management. Once you understand that distinction, much of what they do makes sense. Unfortunately, some unhappy conclusions for the customers of these services do logically follow, starting with the fact that if you're not a huge customer, the financial services have little natural incen…
