NS&I new web offering -v- Linux

polymaff

Has anyone managed to sign in from Linux since NS&I "upgraded" their web-site?

I use Lubuntu and Mozilla Firefox.

You get so far and then NS&I puts up a message which includes words to the effect of "there's an error. It is not your fault - it is ours.  Click cancel and start again."

Great.

Swipe

Works ok for me using linux on all PCs with either chromium and chrome. 

Section62

polymaff said:

I use Lubuntu and Mozilla Firefox.

I have the same (FF91.11esr).

I get the same error message just after confiming the new PIN.

Slightly worrying I got a message before that saying it was "securing my browser" (whatever they think that means) - I always start a fresh private browsing session with absolutely nothing stored, so if their new login relies on cookies or stored information then I'll have that hassle each time I log in (if/when I can).

Edit:  They say FF is supported from version 56 or later.

Section62

The help page says "Make sure you are not using private browsing (incognito mode)".

I was able to log in using a standard session.

Logging out then trying a private browsing session again I got the same error.

Looks like they have designed a new security system which is incompatible with private browsing? 

SJMALBA

Linux & FF here too (and cookies are cleared on browser closure, plus I use some privacy/security add-ons); thankfully, no need to access NS&I at the moment, so I'm staying well clear for now, in the hope that they sort out a workable system!

I've encountered phone call (landline or mobile) and OTP security with a number of banks, without any difficulties - why is the NS&I system seemingly problematic (for some)?

Section62

SJMALBA said:

I've encountered phone call (landline or mobile) and OTP security with a number of banks, without any difficulties - why is the NS&I system seemingly problematic (for some)?

Most of the banking sites I've used with an OTP tend to just use the code as an additional step in the login process, i.e. like a password which changes each time.

This NS&I experience wanted me to set up a PIN, mentioned making the computer a 'trusted device', and wanted an OTP entered.  Maybe they've over complicated things?  Not facilitating the use of Private Browsing is a really strange choice - if it was a choice, rather than bad design.

MK62

I've had a few issues with FF on Linux over the past few months.....mostly noticed on certain sites (though not all) where a popup window is supposed to appear after answering a question......it doesn't appear......same sites then work OK on Opera (chromium based).....
That's on Linux Mint 19.3.......

SJMALBA

MK62 said:

I've had a few issues with FF on Linux over the past few months.....mostly noticed on certain sites (though not all) where a popup window is supposed to appear after answering a question......it doesn't appear......same sites then work OK on Opera (chromium based).....
That's on Linux Mint 19.3.......

Which version of FF? Do you use any FF add-ons? Also, take a look at FF settings?

Prism

Looks like they are using device security and a OTP for 2FA. That is generally considered better than password based security but does require the use of cookies.

masonic

Ok on Firefox 102.0.1 (64-bit) / Ubuntu 22.04 LTS with privacy settings cranked up to 'Strict' and uBlock Origin running

masonic

Prism said:

Looks like they are using device security and a OTP for 2FA. That is generally considered better than password based security but does require the use of cookies.

Yes, yet another site to add an exception not to clear cookies on exit.