Santander security login

ColdIron

Rollinghome wrote: »

I don't see the point of a having secure card reader system if it can be bypassed at will by anyone who doesn't have the card.

The functionality is restricted if you don't login with the card reader

Rollinghome

ColdIron wrote: »

The functionality is restricted if you don't login with the card reader

It is but as I remember you can still make payments, albeit only to pre-authorised payees, without use of the card. Any listed payee gaining access can send themselves payments. Allowing people to use such simple pws doesn't seem to encourage caution.

Why not have a reasonably secure login then if functions needing more security are needed require use of the card reader? That way they get a double layer of security for those functions. Using the card reader for the basic login to seems to suggest a security advantage which for basic access isn't there.

srcandas

..................

Rollinghome

Their problem is that many of their customers don't value security and won't like complex systems. Make your security systems too inconvenient and they'll go to the competition.

srcandas

Rollinghome wrote: »

Their problem is that many of their customers don't value security and won't like complex systems. Make your security systems too inconvenient and they'll go to the competition.

But the complexity needs to be internal to the systems and thus shouldn't tax the user too much. My previous post I was going to suggest an approach which stops simple keystroke recording or replay of network traffic.

However a colleague thought it not a good idea.

But it is simple enough to implement approaches which greatly reduce criminal opportunity and simple keystroke replay. Hopefully the banks already do this but from what I have seen of UK high street bank efficiency I wouldn't count on it

Freecall

I would consider all of these systems at interim technologies, flawed but necessary.

I would imagine that the end game has to use biometrics. Fifty years ago bank customers were known to the staff by their presence ie. they knew what they looked like, how they spoke etc.

The day will come when the 'system' knows who you are by similar biometric intangibles.

It will never be perfect but I can imagine a situation where it equals or even betters the errors which exist even in personal contact.

bubieyehyeh

lazer wrote: »

Unfortunately I can't get to a branch as I work office hours

I went into a nationwide branch on a Saturday and picked one up.

Archi_Bald

How many people have had unauthorised logins into their Santander accounts, even though they took proper precautions with their login details? How much money have they lost?

lazer

bubieyehyeh wrote: »

I went into a nationwide branch on a Saturday and picked one up.

Good for you - but my nearest branch is over 20 miles away and is only open for 3 hours on a saturday - if I really needed it I could go - but I will jsut wait for it to arrive in the post (although it has now been over a week since i requested it)

junglejame

toolmaker54 wrote: »

I cannot say I am too impressed with my new online banking security with Santander, you input a membership number then input a five digit passcode, all of which could be logged by a keylogger

Surely online security has to be a two-way thing. . . if you have a key-logger on your system you are doing something wrong at your end also!