From: Noel Carroll (Noel.Carroll at domain CardBase.com)
Date: Tue 09 May 2000 - 11:43:31 IST
I have to say that sounds a bit more secure. One thing that bugs me about
AIB is that, when you start off to say pay a bill, they ask you for a digit
of your 5 digit PIN, after that they don't ask anymore. It gets cached.
AIB, during authentication ask you for your 8 digit ID which, from what I
see is your DOB and two other digits. The final stage of authentication is
the last 4 digits of either your Work, Home or Credit Card no. It doesn't
exactely leave me feeling very secue since a goodly proportion of the data
is derivable if you really want to get it.
Noel
> -----Original Message-----
> From: Aidan Keady [mailto:aidan at domain parthus.com]
> Sent: Tuesday, May 09, 2000 10:50 AM
> To: Noel.Carroll at domain cardbase.com; vincent at domain cunniffe.net
> Cc: ilug at domain linux.ie
> Subject: Re: [ILUG] aib 24hour-online
>
>
> Noel Carroll wrote:
> >
> > Agreed! I use it myself from home only. I'd not use it
> at work and I'd
> > not use it at all were it not that It's not too easy to get
> to the bank
> > sometimes. BOI's site is better from what I hear. I
> know they used to
> > provide you with a little credit card sized algorithmic
> number generator and
> > that formed part of your authentication. AFAICR that was
> two years ago
> > anyway but maybe I am just raving!!! Anyone on the list
> signed up with BOI
> > online who can confirm this and maybe explain how the system works?
>
> Yeah, BOI give out little token things, which look like calculators.
> However, these are being phased out and won't work from the
> end of May,
> when they're moving to a PIN/password system. I think
> they've been using
> PINs for all new customers since the start of the year.
> With the token,
> you have a 6-digit ID which you enter on the website and are
> then given
> a 7-digit code to enter in the token (which itself has a 4-digit PIN).
> The token returns another 7-digit code which you enter on the website
> and you get access to your accounts (whichever ones to which you have
> asked for access). It's possible to pay bills, transfer
> money, etc. -
> for every transaction, you're given another code to enter to the token
> which returns another code and so on.
>
> ATB,
> Aidan.
>
> --
> Irish Linux Users' Group: ilug at domain linux.ie
> http://www.linux.ie/mailman/listinfo/ilug for
> (un)subscription information.
> List maintainer: listmaster at domain linux.ie
>
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:06:04 GMT