[ILUG] aib 24hour-online

[Fergal Moran]

Fergal Moran
fergal.moran at wasptech.com
fergal at moran.com
--
WASP Technologies
http://www.wasptech.com
Wireless Application Solutions Provider

> -----Original Message-----
> From: ilug-admin at linux.ie [mailto:ilug-admin at linux.ie]On Behalf Of
> Vincent Cunniffe
> Sent: 09 May 2000 09:51
> To: ilug
> Subject: Re: [ILUG] aib 24hour-online
> Fergal Moran wrote:
> >
> > > uhmmm... this site is now giving me the occasional "can't
> connect to
> > > database", etc.. type errors. Which is not unusual with
> these NT ASP
> > > sites.
> > Uhhmm - I would stay well away from that site.  I signed up
> for it about 6
> > months ago (it was still asp then( and after using it the
> first time I got
> > it cancelled.  It is incredibly insecure.  An online
> banking site with no
> > security other than username/password - the mind boggles.
>
> Are we still talking about AIB here?
>
> If so, you need to know your account code, a 5-digit PIN
> code, and several
> random pieces of information to log into a https server.
> Admittedly not
> the greatest encryption strength in the world, but it's still solid.
>
> What's the problem that you perceive?
>
Well - for starters - someone could register www.24hor-online.ie and various
other spelling mistakes, put up a site that looks exactly the same and then
everyone who mis-spells the url would be typing their details into some
hackers web site.  Granted they couldn't do much more than pay your
electricity bills for you but still it makes me feel unconfortable.  How
long will it be before credit agencies are employing people to pry into your
finances.

When I was using online banking with the Royal Bank of Scotland they had a
system where in order to use it on a machine I had to get a 25 digit PIN
code mailed to me and type it in in the browser before it would work on that
machine.  The code was unique to me and could only be used once.  I also
have online business banking from AIB and that is far more secure.  It is a
seperate piece of software and does not work over a web connection.

Just my 2 euros!

Fergal.