Rant: Banks that only let you see the last few transactions online

[Mark]

MS money stopped working for me years ago. The last UK version was, IIRC, about 2004???

[charles]

with Bank of Scotland, when I set up a new payment the bank then rings me and asks me to key into the phone the numbers I see on the screen.

[Mark]

SSL/TLS isn't perfect though. A lot of it's security depends on the implementation in the browser and the server. And once the data leaves the secure tunnel then we have no idea what is happening to it.

I agree that a simple keylogger wouldn't be able to crack this. I'm sure someone could craft some malware to get around it. I would assume an on-screen virtual keyword would be trivial to monitor.

Unfortunately this kind of fraud is still very common, despite the propaganda from the banks.

[Mark]

I would assume that any password that's simple enough to remember would also be easy to guess.

What annoys me is when organisations restrict the characters you can use in the password, like not allowing punctuation characters.

[stuart noble]

I have no complaints about Santander online banking, and the current current account with cashback and interest is a big improvement over last year's over complicated version. I just copy and paste into my own spreadsheet, which translates the bank's transaction info into English. I have tried disabling that remembered password thing for specific sites in Firefox but every now and then I see the password pop up when I'm typing. I probably haven't tried hard enough :-)

[Dave Plowman (News)]

Same with Barclays, as I said.

[Huge]

IIRC, the Government is going to steal this;

may even already have done so.)

[Ian Jackson]

In message , charles writes

Halifax does this for various online transactions, but, unfortunately, it doesn't seem to 'hear' the numbers I key in. Fortunately, it also has a voice recognition system as backup, and speaking the numbers does work OK.

[Davey]

I dug my old book out last year, and sent it off for a refund. It had interest added, and I was reimbursed.

--=20 Davey.

[Man at B&Q]

You assume wrong. I defy you to guess my pasword. "Simple to remember" means many different things to different people.

MBQ

[Mark]

You may have a good way of generating passwords that are difficult to guess but the vast majority of people pick stupid passwords which are easy to guess.

[John Williamson]

2009?, but GNUCash will import all formats of MS Money data. Note that:-

applies, follow the link and instructions for a working, no activation needed, version of Money Plus.

[Man at B&Q]

Nice wriggle from "easy to remember" to "stupid". If you can't support your original asertion, don't bother.

MBQ

[stuart noble]

Just make sure your dog has a very unusual name

[Mathew Newton]

This xkcd comic illustrates the issue well (admiitedly somewhat techy):

's interesting is that I can still remember the 'correcthorsebatterystaple' password even now despite not having seen it for quite some time!

Mathew

[whisky-dave]

My parents told me they used to leave their front door open but haven't done so in the past 20 years.

[whisky-dave]

No they can't because they also need your 10 digit security number, before they get to the section where they ask for the 8 digit number geberated by the card reader.

Which is well handy as here at work someone wanted top get to their account urgently so emaikled round asking if anyone had a reader at work.

[Jules Richardson]

everything beyond the tenth character anyway :-)

[Mathew Newton]

Ha ha, true. I've been bitten by that before with Apache's HTTP authenticat= ion defaulting to using the CRYPT encryption format... Little did I know at= the time that only the first 8 characters of the supplied password are con= sidered and it was only when I was sure I'd mistype the end of a passphrase= , yet still obtained access, did I dig a little deeper to discover this!

Mathew

[Mark]

I've not tried GNUcash. Is it any good?

Isn't this the US version? The UK version was discontinued longer ago.