3 ms·

My bank has security image + security user written sentence. If I don't see a big goofy dog saying "Who's a good boy? [my dog's name] is a good boy!", I know I

My bank has security image + security user written sentence. If I don't see a big goofy dog saying "Who's a good boy? [my dog's name] is a good boy!", I know I'm not on the right website.

startling 10y ago
So, what's stopping the wrong site from making those requests to your bank and proxying the image?
- Tortoise 10y ago
  The bank sets a cookie on your machine and only displays the image if you have the cookie. You won't get the image on a machine you've never used to log in before.