[Tfug] [TFUG] Bank of America e-mail

Jude Nelson judecn at gmail.com
Wed Nov 21 17:17:07 MST 2007


Hey guys,

I recently submitted a complaint to Bank of America regarding the fact
that their front page (read: the page where you enter your Bank ID to
access your account) has insecure elements on the page.  Here's the
excerpt from their response:

 - While the Online ID and Passcode are presented in web form fields
over an unencrypted channel, when you type the Online ID only you can
see the information you type and the Passcode is displayed as asterisks.

Yeah. Right.

Jude




More information about the tfug mailing list