3 ms·

You should see the password requirements. Shinsei Bank hardcaps your password at 10 characters.

by vsnf 3y ago

criddell 3y ago
Which probably means they are storing your password rather than a hash of the password. I complained about this to my bank when I found out they stored passwords and their response was "don't worry about it - you aren't responsible for fraud".
- vkou 3y ago
  > I complained about this to my bank when I found out they stored passwords and their response was "don't worry about it - you aren't responsible for fraud". I'd much rather live in a world where banks are idiots with passwords and I'm not responsible for fraud, than a world where I'm expected to be not an idiot with my passwords, and I were responsible for fraud. Every day, I count my lucky stars.
- Arrath 3y ago
  Reminds me of when one of my subordinates applied for an apartment and as part of the process the property management people reached out to me to verify his employment. How? By forwarding me his unredacted application chock full of PII. When I pointed out that most people probably wouldn't appreciate their SSN and more being shot around in emails by the management company, I was simply told it was "standard practice" for them. Following insinuations that their "standard practices" might just be "fucked" were summarily ignored.
- alephnan 3y ago
  > "don't worry about it - you aren't responsible for fraud". Have fun trying to dispute an atm card transaction. The agent actively dissuaded me from doing it and said it was not possible.
alephnan 3y ago
SMBC prestia requires your password to not contains more than two alphabet characters consecutively nor two numbers consecutively. Invalid: abc123 Valid: ab12cd34a4f9 Obviously, no uppercase or ANY special characters like “.” Allowed… Everything is bloated with security theater, where the most critical things are vulnerable. For example, I saw a form for 2-Chōme requiring a phone number with three input slots. Entered my phone, it’s already been used. That’s fine, I just shifted one number from one slot to the other. 80-1234-5678 (already registered) 80-123-45678 (workaround to use the same phone number on a different account). It worked.
SenHeng 3y ago
For over 10 years now, my online banking password has been my ATM PIN, which is only 4 numbers. I believe MUFJ and SMBC have similar systems. I was actually impressed by JPPost's system, which required a 6 digit PIN.
- Tor3 3y ago
  Many years ago I used to have an 8-digit ATM pin, but sometimes later this was enforced to be limited to 4 digits. Go figure.

You should see the password requirements. Shinsei Bank hardcaps your password at 10 characters.

by vsnf 3y ago

You should see the password requirements. Shinsei Bank hardcaps your password at 10 characters.

Which probably means they are storing your password rather than a hash of the password. I complained about this to my bank when I found out they stored passwords and their response was "don't worry about it - you aren't responsible for fraud".

vkou 3y ago
> I complained about this to my bank when I found out they stored passwords and their response was "don't worry about it - you aren't responsible for fraud". I'd much rather live in a world where banks are idiots with passwords and I'm not responsible for fraud, than a world where I'm expected to be not an idiot with my passwords, and I were responsible for fraud. Every day, I count my lucky stars.
Arrath 3y ago
Reminds me of when one of my subordinates applied for an apartment and as part of the process the property management people reached out to me to verify his employment. How? By forwarding me his unredacted application chock full of PII. When I pointed out that most people probably wouldn't appreciate their SSN and more being shot around in emails by the management company, I was simply told it was "standard practice" for them. Following insinuations that their "standard practices" might just be "fucked" were summarily ignored.
alephnan 3y ago
> "don't worry about it - you aren't responsible for fraud". Have fun trying to dispute an atm card transaction. The agent actively dissuaded me from doing it and said it was not possible.

alephnan 3y ago

SMBC prestia requires your password to not contains more than two alphabet characters consecutively nor two numbers consecutively. Invalid: abc123 Valid: ab12cd34a4f9 Obviously, no uppercase or ANY special characters like “.” Allowed… Everything is bloated with security theater, where the most critical things are vulnerable. For example, I saw a form for 2-Chōme requiring a phone number with three input slots. Entered my phone, it’s already been used. That’s fine, I just shifted one number from one slot to the other. 80-1234-5678 (already registered) 80-123-45678 (workaround to use the same phone number on a different account). It worked.

SenHeng 3y ago

For over 10 years now, my online banking password has been my ATM PIN, which is only 4 numbers. I believe MUFJ and SMBC have similar systems. I was actually impressed by JPPost's system, which required a 6 digit PIN.

Tor3 3y ago
Many years ago I used to have an 8-digit ATM pin, but sometimes later this was enforced to be limited to 4 digits. Go figure.