Annoying Nationwide new security measures

roddydogs

MarkyMarkD wrote: »

I don't quite see roddy's problem with A&L's security which is actually FAR stronger than most banks.

If you try to log in from a PC you have used previously to access A&L, you need to enter your 12-digit userid and your 5-digit passcode. And then you can do anything on your account - including transfers to previously mandated accounts only - without a supplementary password.

But to make transfers to accounts which have not been mandated, you need to enter a supplementary password.

And if you are using a PC you haven't used before, you have to enter additional information before you can even see your account details.

Which element of this is it that you think is poor security, roddy?

The point about previously-mandated transfers is that there is NO fraud risk at all in allowing a non-authorised user to transfer money to another account you've already made legit transfers to. A fraudster is going to want to set up a new mandate and transfer money there, not pay your own gas bill or whatever!

Read my posts- where did i say that it was poor security? i was just saying how easy it is to use compared with others (NR especially) after someone complained about the new NW security .
2.
Where did i say it was to a non-mandated transfer?

sloughflint

roddydogs wrote: »

where did i say that it was poor security?

Id like to know if A&L have more fraud on their internet banking than any other. You can access their site with 2 clicks, no questions. most times. at worst you just have to put in Customer no!

Inferred perhaps?;)

roddydogs

sloughflint wrote: »

Inferred perhaps?;)

taken out of context-read the whole post1

sloughflint

roddydogs wrote: »

taken out of context-read the whole post1

That was the whole post. LOL.

roddydogs

sloughflint wrote: »

That was the whole post. LOL.

Sorry you are right i think A & L security is lousy- thats why i bank with them DOH LOL:mad::mad:

MarkyMarkD

Roddy, your entire original post was

roddydogs wrote:

Id like to know if A&L have more fraud on their internet banking than any other. You can access their site with 2 clicks, no questions. most times. at worst you just have to put in Customer no!

There's no possible way to interpret this other than you alleging that A&L's security is less tight than that of other banks. Why else would you ask if they have more fraud?

In fact, the opposite is true and A&L's security is tighter than most banks which don't check your computer is one you've used before and apply a increased security level if that's the case.

Given that most online fraud is phishing and that inherently involves using a different computer from the original user's, this particular security step is IMHO a very good one.

I do also bank with A&L and I have no fears about their online security.

But the issue is also fairly academic as banks almost universally reimburse fraudulent online transactions. They operate good security for their own benefit, not that of their customers who don't suffer the losses in any case.

roddydogs

The original post was someone complaining about NW security measures.
I just pointed out that A/L is very easy to use (NR please note), and queried that do they have more fraud?-obviously not as they wouldnt use it.
How you interpret this is your problem.
No more posts on this goodbye.

Beate

I have always used my A&L internet banking from both my home and my office computer and never had to input more than user ID and password. Did this change recently?

Also, after providing answers to 5 of Nationwide's new security questions, I have not been asked them again while logging in. Will they just randomly pop up now and again?

Paul_Herring

olly300 wrote: »

http://www.nationwide.co.uk/about_nationwide/membership_matters/suggestion_form.asp

Ta for that. My contribution:

Me wrote:

Get rid of those stupid 5 questions - they offer no extra security over the old method.

"Two Factor authentication" only works if the factors are different. Two different passwords does not constitute two factors. See http://worsethanfailure.com/Articles/WishItWas-TwoFactor-.aspx for a satirical view of what all banks are (not) doing to safeguard their customers.

Extra passwords are annoying to the point where I'm disinclined to use internet banking. Or is that the idea behind it?

And don't get me started on the banality of the questions supplied - What if I didn't have a pet, don't have a favourite colour or have more than one favourite drink? I couldn't find even 3 questions to which I'd easily remember the answer to if I didn't include words from the questions themselves. Which is what other people appear to be doing - see http://forums.moneysavingexpert.com/showthread.html?t=576826

Edit: Ok - who broke the page? I clicked Submit on the suggestion page, and it took me to a "Page not Found" page :grumpy:

Milarky

Excellent Paul. Why don't you post link 2 at link 1 with a message like: "Dear Nationwide: re. recent security questions. I have just come across this fascinating discussion of this very topic. Perhaps you would care to read about 'Wish-It-Was Two-Factor' (aka 'Wishy wishy factor') implementations at other banking institutions and ask yourselves: 'Do we seriously think we are kidding anyone with this sort of thing?'"[I was tempted to]