NS&I new web offering -v- Linux

LHW99

masonic said:

Prism said:

Looks like they are using device security and a OTP for 2FA. That is generally considered better than password based security but does require the use of cookies.

Yes, yet another site to add an exception not to clear cookies on exit.

And perhaps to add an exception to the pop-up blocker in FF?

masonic

LHW99 said:

masonic said:

Prism said:

Looks like they are using device security and a OTP for 2FA. That is generally considered better than password based security but does require the use of cookies.

Yes, yet another site to add an exception not to clear cookies on exit.

And perhaps to add an exception to the pop-up blocker in FF?

I haven't needed to do so. If there is a popup, then not seeing it hasn't prevented me from setting the new PIN, logging in, or making transactions.

polymaff

Thanks for the feedback.

Latest Firefox (102) and no private sessions.

I use a minimal machine that's for financial transactions only.  To get things done I installed Chromium.  When I'd set up 2FA I tried Firefox again - no dice.

The guy at NS&I asked me how to spell LINUX - three times - before he got it right!  (and that Linux is not a browser)

SJMALBA

polymaff said:

Thanks for the feedback.

Latest Firefox (102) and no private sessions.

I use a minimal machine that's for financial transactions only.  To get things done I installed Chromium.  When I'd set up 2FA I tried Firefox again - no dice.

The guy at NS&I asked me how to spell LINUX - three times - before he got it right!  (and that Linux is not a browser)

LOL!

Did you try 'whitelisting' NS&I in FF (as per @masonic's suggestion on page 1) ?

SJMALBA

masonic said:

Ok on Firefox 102.0.1 (64-bit) / Ubuntu 22.04 LTS with privacy settings cranked up to 'Strict' and uBlock Origin running

Other than Ubuntu, same here - do you normally use Private Browsing, and if so, did you have to disable it?

masonic

SJMALBA said:

masonic said:

Ok on Firefox 102.0.1 (64-bit) / Ubuntu 22.04 LTS with privacy settings cranked up to 'Strict' and uBlock Origin running

Other than Ubuntu, same here - do you normally use Private Browsing, and if so, did you have to disable it?

No I don't use Private Browsing as my computer is not shared with other people. The only advantage to accessing via a private window is that it stops the browser including pages you browse in your local browsing history, and doesn't save passwords and cookies. The last two can be configured not to be saved in a normal browsing session through the settings, and I see no reason to hide the fact I have visited NS&I from the only user of my computer (me) - in fact, I find the history feature useful sometimes if I need to know exactly when I visited a site in the case of experiencing a problem, or recalling exactly when I did something. I do have a LUKS encrypted home partition, so can be relaxed about my data being secure should my home be burgled and my PC stolen, so don't have a problem with NS&I storing a cookie on my browser to remove the 2FA requirement at login.