Reply to post: Re: If you use Online Banking you get what you deserve

Password reuse bot steals creds from weak sites, logs in to banks

Cuddles

Re: If you use Online Banking you get what you deserve

"I'm just wondering what frigging bank needs only a username and password?!"

Santander and Co-op, to name the two that I know of. Santander actually needs two passwords (a 5 digit PIN and an actual password), but I really hope they don't think that's what two factor authentication means. Co-op needs password and the answer to one of 5 or so "secret" questions. They also both give you a username rather than allowing you to choose one (Santander is a string of numbers, Co-op users your account details). So it's not quite as bad as it sounds since although they both just have username/password combinations with no two factor security, neither should be vulnerable to credentials scraped from other sites.

Edit: Also worth noting that both do use two factor authentication for setting up new transactions, so even if someone manages to get in and see my accounts, the worst they'd be able to do would be give money to someone I've paid before, they wouldn't be able to steal it for themselves.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon