Halifax security improvements

oliviasmummy

I would have thought that longtimelurkerhas hit the nail on the head with that answer. Two pages is more secure than One. We are not going to be asked any more information than we already do now so no problem.

dtaylor84

A random guess as to how this is more secure:

If they present the security question to you before you given them your username, they have to pick a random security question without knowing what account you're trying to log in.

Assume there is an attacker who has obtained, say, your password and one security question/answer.

In this case the attacker could just repeatedly reload the page until they get the question they know the answer to. (I'm not sure how halifax do this at present, they may use cookies to track users but they can be cleared, perhaps they ask different questions on different days, but the principle is the same).

By asking you for your username first they can ensure the attacker will be continually asked the same security question until they get it right. (Although they could wait until you log in to change the question asked, but as they would have to begin the login process to find this out they could perhaps identify your account as experiencing an unusual number of failed/abandoned logins).

Or it could be for an entirely different reason - perhaps to give them more advertising space as dizziblonde suggests!

opinions4u

dtaylor84 wrote: »

Or it could be for an entirely different reason

Such as aligning the systems with Lloyds.

Just a wild stab in the dark there!

glider3560

Just noticed a link to this page whilst on online banking: https://www.halifax.co.uk/aboutonline/important-information.asp

Important: Notification of change to online service conditions From the 11 May 2010, we are changing the way you sign in to our online service.
You will still use your username and password to sign in, but we will be making other changes to make your online banking more secure. One impact of these changes is that you will no longer be able to change your username.
Paragraphs 1, 2.2, 3.2 to 3.4, and 3.11 of the online service conditions are amended to reflect the changes.
Click here to view an up to date copy of the online service conditions.

fozzeh

Things will be more secure.
Halifax is moving to Lloyds online system in due course.
Some parts will stay the same (ish).
opinions is right.

rb10

fozzeh wrote: »

Halifax is moving to Lloyds online system in due course.

As far as I am aware, this is incorrect. I believe that:

Halifax accounts will be held on (a version of) the Lloyds system - but this is all behind the scenes, and does not affect us at all (other than small things, like the fact that it is restrictions in this software that does not allow interest rates to be displayed online at the moment).

Moving forward, both banks will move onto a brand new online banking system, so what you actually see and use will change completely. As Lloyds' online banking doesn't currently have the breadth of functionality that Halifax's has, Lloyds is due to move onto it first. I believe that we are looking at a timescale of months rather than years for this.

Bloomberg

bobblebob wrote: »

When i signed in today got a screen telling me that Halifax are making improvements to the online banking security. Part of it involves them asking for your username and password on 1 page, and your security question on the next page. Not sure how this will help really.

They did say they're implementing other security measures but didnt go into detail

I think that theyare just trying to keep one step ahead of the fraudsters. To be fair it canonly benefit the customers.

jambosans

rb10 wrote: »

Moving forward, both banks will move onto a brand new online banking system, so what you actually see and use will change completely. As Lloyds' online banking doesn't currently have the breadth of functionality that Halifax's has, Lloyds is due to move onto it first. I believe that we are looking at a timescale of months rather than years for this.

I agree. Lloyds TSB have been planning an upgrade to it's online services for a couple of years now, I would imagine LTSB customer's Internet Banking will be updated first, and once the back office HBOS integration is completed, HBOS Online will follow.

I believe the below article refers to the update, codenamed "Galaxy", the timescales stated in the article indicate a 2010/ 11 launch:-
http://www.mad.co.uk/Main/Search/MadSearchResults/Articles/26a1b7e6ddd643c7aac941caaf10f9ba/50M-Digitas-alert-as-Lloyds-TSB-reviews.html

Edit: for some reason that link does not show the whole article, however if you Google "Lloyds TSB Galaxy", it's the second link.

MME_2

Lloyds TSB internet banking is definitely changing in a few weeks time (not to the Halifax IB though).

fozzeh

rb10 wrote: »

As far as I am aware, this is incorrect. I believe that:
Halifax accounts will be held on (a version of) the Lloyds system - but this is all behind the scenes, and does not affect us at all (other than small things, like the fact that it is restrictions in this software that does not allow interest rates to be displayed online at the moment).
Moving forward, both banks will move onto a brand new online banking system, so what you actually see and use will change completely. As Lloyds' online banking doesn't currently have the breadth of functionality that Halifax's has, Lloyds is due to move onto it first. I believe that we are looking at a timescale of months rather than years for this.

It's not incorrect =P but you're not wrong with what you say in the first paragraph.
As I said, HFX will be moving onto the Lloyds system (platform) but only in the background at first. It may be 'new' but it's a re-hash of existing Lloyds. It will be a huge shake up for HFX banking call centres and call times will probably increase due to trying to get used to it…and it will have an effect on customers in one way or another at first.

jambosans wrote: »

I agree. Lloyds TSB have been planning an upgrade to it's online services for a couple of years now, I would imagine LTSB customer's Internet Banking will be updated first, and once the back office HBOS integration is completed, HBOS Online will follow.
I believe the below article refers to the update, codenamed "Galaxy", the timescales stated in the article indicate a 2010/ 11 launch:-
http://www.mad.co.uk/Main/Search/MadSearchResults/Articles/26a1b7e6ddd643c7aac941caaf10f9ba/50M-Digitas-alert-as-Lloyds-TSB-reviews.html
Edit: for some reason that link does not show the whole article, however if you Google "Lloyds TSB Galaxy", it's the second link.

As you can see with Galaxy, it started in 2008…a lot has changed in 3 years. The project is heavily re-structured. Codename makes it sound covert...it's not the SAS!

But I'm only stabbing in the dark here too.