HSBC - Nasty thing they just sent me. (secure key)

jjlandlord

Gromitt wrote: »

What I'm saying is that the dongle itself may (or may not, I've not examined it and don't have the knowledge to) be secure, but there is most likely a database somewhere inside HSBC that contains these 'seeds', and if found, that person could possibly emulate any banking user and commit havok.

Yes, but as said in the article, you also need to know which seed corresponds to which dongle, then you need to know which dongle belongs to which person, etc., etc. Not obvious to me that someone would spend so much time and money just to hack your average joe puny bank account.

In any case, I'm sure you realise that a breach of a bank's system is a problem on its own, quite independent of the purpose of these dongles or any other way for you to log into your bank's online service.

Schwade

The dongle is an inconvenience but I value my security more than the extra 10 seconds (max) to log in/transfer etc.