[Tfug] [TFUG] Bank of America e-mail

[Claude Rubinson]

On Wed, Nov 21, 2007 at 05:17:07PM -0700, Jude Nelson wrote:
> Hey guys,
> 
> I recently submitted a complaint to Bank of America regarding the fact
> that their front page (read: the page where you enter your Bank ID to
> access your account) has insecure elements on the page.  Here's the
> excerpt from their response:
> 
>  - While the Online ID and Passcode are presented in web form fields
> over an unencrypted channel, when you type the Online ID only you can
> see the information you type and the Passcode is displayed as asterisks.
> 
> Yeah. Right.

That's truly phenomenal.  I've taken the liberty of forwarding it
along to the daily wtf site.

C.