Santander 123 making a hacker's life so much easier (Feb 2020)

EssexExile

As I said above I was asked for an OTP yesterday but today, on a different computer, I wasn't. Just got in with the 5 digit PIN as I have for years.

masonic

EssexExile said:

As I said above I was asked for an OTP yesterday but today, on a different computer, I wasn't. Just got in with the 5 digit PIN as I have for years.

Suggests that some people may have a cookie stored in their browser allowing them to bypass the OTP. Perhaps this happens if you save your userid? Obviously if this is the case, only your device would have such easy access, which can easily be revoked by clearing your cookies.

brewerdave

brewerdave said:

Still logging in the "old" way; ID no. ,piccie and phrase ,characters from password and from PIN

Spoke too soon ; new log in page appeared this a.m along with the Trusteer Rapport download message 

brewerdave

….And today ,its back to the "old" method on the same PC and browser ??

molerat

I am now forced to the "new" log in page when using my old bookmark. Still not asked for a OTP though.

Tildaplum

Say what you want about the Daily Mail but they do have their finger on the Pulse of MSE threads

https://www.dailymail.co.uk/money/saving/article-8051423/Customers-think-Santanders-new-online-banking-log-secure.html

RG2015

Tildaplum said:

Say what you want about the Daily Mail but they do have their finger on the Pulse of MSE threads

https://www.dailymail.co.uk/money/saving/article-8051423/Customers-think-Santanders-new-online-banking-log-secure.html

Kinda weird seeing your own posts quoted on the daily mail online.
https://forums.moneysavingexpert.com/discussion/6098165/is-the-new-santander-login-secure/p1

alanwsg

molerat said:

I am now forced to the "new" log in page when using my old bookmark. Still not asked for a OTP though.

You have a cookie from Santander on your computer so they know it's 'you'.
You could try clearing cookies, or just opening an incognito window and try the new login, it'd probably ask for a OTP then. Probably also if you were to tick the 'I'm on a public computer' box.

molerat

alanwsg said:

molerat said:

I am now forced to the "new" log in page when using my old bookmark. Still not asked for a OTP though.

You have a cookie from Santander on your computer so they know it's 'you'.
You could try clearing cookies, or just opening an incognito window and try the new login, it'd probably ask for a OTP then. Probably also if you were to tick the 'I'm on a public computer' box.

I had actually just done a complete flush of the computer as I have been having log in problems with one site, maybe that is why I was pushed to the new log in.

RG2015

molerat said:

alanwsg said:

molerat said:

I am now forced to the "new" log in page when using my old bookmark. Still not asked for a OTP though.

You have a cookie from Santander on your computer so they know it's 'you'.
You could try clearing cookies, or just opening an incognito window and try the new login, it'd probably ask for a OTP then. Probably also if you were to tick the 'I'm on a public computer' box.

I had actually just done a complete flush of the computer as I have been having log in problems with one site, maybe that is why I was pushed to the new log in.

I have not done any flushing and my old bookmark started pointing to the new login earlier this week. I think the cookie may negate the need for an OTP as I have not yet needed one to log in.