Lol i recently saw the 2auth for an isp in my country. It works like this. To see/change your banking details they bring back the banking info (api call) and d

Lol i recently saw the 2auth for an isp in my country. It works like this. To see/change your banking details they bring back the banking info (api call) and display it on screen, BUT their security is to 'quickly' bring up a modal(js) to 'hide' the sensitive information... of course just modify 'display:none' on modal and you can see everything :s