4 ms·

They're a three letter acronym that starts with P and ends with C.

• secone 7y ago
  Shoot. They are pretty open about the fact that their passwords are case insensitive. I had always hoped this was some clever implementation using multiple hashes upon password creation. Or tolower() everywhere. If it's true that they're able to read it back though, then why would they bother?
• diebeforei485 7y ago
  Holy smokes. See if you can get in touch with someone in the financial press (such as the Wall Street Journal).
• deleted 7y ago
  [deleted]
• mav3rick 7y ago
  Pnc ?
• keenmaster 7y ago
  Wow, they should know better. That’s really mediocre if true. Call the OCC consumer hotline which is listed at the following link https://www.occ.treas.gov/topics/supervision-and-examination/dispute-resolution/consumer-complaints/index-consumer-complaints.html https://www.occ.treas.gov/topics/supervision-and-examination... Tell them you’d like to file an “Official Complaint” regarding a serious cyber security issue at that bank, and to transfer you to whoever handles official consumer complaints regarding cyber security. Regulators are sensitive to the word “complaint” (specific wording matters) and typically require that complaints are stored, prioritized, and handled in a prescribed way. Ask them if they can get back to you with any resolution and leave your contact information. Update HN if you’re comfortable with that. Good luck.
• dawnerd 7y ago
  That's about run of the mill for them (assuming we're thinking of the same bank). I called about my mortgage and they started reading off someone else's information. They also wanted me to confirm personal information over email...
• davismwfl 7y ago
  Wow, not good for such a large bank. Holy crap.