2 ms·
TradeKing definitely needs to be added to this list. They should be prominently featured at the top in a security hall of shame for their cartoonish security.
by daveguy 10y ago
TradeKing definitely needs to be added to this list. They should be prominently featured at the top in a security hall of shame for their cartoonish security.
Edit, examples:
No 2 factor authentication
Displaying the answers to your security questions in multiple choice form (with a none of the above option, but usually including your answer).
Requiring your password to be entered with mouse clicks at an on-screen keyboard. Not kidding.
Those ridiculous "anti-phishing" pics.
TradeKing is the definition of security theatre.
Do not use TradeKing.
- CiPHPerCoder 10y ago> Displaying the answers to your security questions in multiple choice form (with a none of the above option, but usually including your answer). Kill it before it lays eggs. > Requiring your password to be entered with mouse clicks at an on-screen keyboard. Not kidding. [x] Bad security [x] Bad usability (Edit: apparently unicode checkmarks are filtered out on input now) This is like the personification of a lose-lose interpretation of AviD's rule of usable security.
- cpach 10y agoPlease consider sending them a pull request: https://github.com/2factorauth/twofactorauth/pulls https://github.com/2factorauth/twofactorauth/pulls
- daveguy 10y agoYes. I am aware, thank you. I was planning to send a pull request to add tradeking if it isn't already there when I get home. I doubt they want a hall of shame pull request -- it seems to be a well structured list.