3 ms·
That bank sounds to have bigger issues: perhaps obvious, it's very likely that they were storing the password as plaintext -- since they were able to ask you f
by adanto6840 10y ago
That bank sounds to have bigger issues: perhaps obvious, it's very likely that they were storing the password as plaintext -- since they were able to ask you for a specific character and verify that your answer was correct. Scary.
Have also never heard of a bank that actually asked for a password, substring or not, at least aside from being asked for a 'Phone PIN' or similar lesser/non-critical to authentication piece of information.
- brazzledazzle 10y agoIt's possible that they create the character entry when you set your password and the bank/operator only has access to that particular character in plain text.
- 77pt77 10y agoIn my experience banks store pins in plaintext way to often. The uppercase being indifferent is a first for me but I've had those people tell me that performing copy paste into the password input somehow changed the authentication procedure. He again acted as if I was a complete idiot for suggesting that that made no sense.
- joe463369 10y agoIf your bank is compromised to the point that your password - plaintext or otherwise - has been discovered, can things get much worse?
- wlll 10y agoThe point was more about the reaction of the rep, that it was ludicrous of me to consider passwords to be case sensitive, but yeah, not a good sign in general, though as I use a unique password for everything (1Password) I'm less concerned. Related, the "3d secure" credit card verification system asks for individual chars of a password (at least in the UK).