> The attack surface on software the size and complexity of a bank's is like the Death Star Really? I'm sure there is more to it then I imagine but I've used t

> The attack surface on software the size and complexity of a bank's is like the Death Star Really? I'm sure there is more to it then I imagine but I've used the websites of 3 different banks and their functionality is quite limited, it looks like something you could do in a Rails app in a few weeks. None of the real payment processing is done by the web app as far as I know, it is just a thin layer on top of a database with the transaction history and can store payment orders for batch processing later on. None of the real payment processing systems would face the internet I imagine, so I think the attack surface would be quite small.