> system for "enhanced security" purposes): you enter your account
> number, press login, and you're taken to a page that has your
> password embedded in a graphic (a pretty background picture that you
> get to choose) as a graphic...in case that's hard for you to read, it
> appears in text below the graphic. typing in that password gives you
> full access to all banking capabilities. You can't use anything but
> alphanumeric characters in your password; they insist on one number.

Wow... that's a little crazy. I've never heard of such a thing. I
thought you were about to describe SiteKeys at first -- where you:

1) Enter your username
2) Go to a second page, see your 'secure image'
3) Enter password on that page
4) Gain access to the site

And even those are completely attackable. (For the curious, see:
http://tinyurl.com/2ghkxt)

But what you described sounds asinine. I hope you're planning on
switching banks!

Meredith
________________________________________________________________
Welcome to the Interaction Design Association (IxDA)!
To post to this list ....... [EMAIL PROTECTED]
Unsubscribe ................ http://www.ixda.org/unsubscribe
List Guidelines ............ http://www.ixda.org/guidelines
List Help .................. http://www.ixda.org/help

Reply via email to