Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Java and online banking

Posted Oct 1, 2011 10:48 UTC (Sat) by spongy (guest, #59953)
In reply to: Java and online banking by Kwi
Parent article: Mozilla and Tor on the TLS attack

> US netbanking is a joke when it comes to security, with many banks
> handing over your entire account to the first person who can guess your
> mother's maiden name.

Whats wrong with "making" your mother's maiden name a 20-30 char string with random l/c, U/C, digits and punctuation marks?

(Log in to post comments)

Posted Oct 1, 2011 11:17 UTC (Sat) by Kwi (subscriber, #59584) [Link]

The fact that your bank may ask you to confirm it over the phone? :-)

Obviously, there are work-arounds, but I personally prefer a solution that isn't broken to begin with.

Two-factor authentication is apparently slowly becoming the norm in the US as well, better late than never. I guess it was a bit embarrassing for the banks to provide less account security than World of Warcraft.