Coventry BS login down

Stubod

..just logged in this morning, (Tuesday 1st October), using Firefox and it workedd fine???

SJMALBA

Stubod said:

..just logged in this morning, (Tuesday 1st October), using Firefox and it workedd fine???

Strange... Which version? I'm on 130.0.01, which seems to be the latest (on Linux, at least)?

masonic

SJMALBA said:

Stubod said:

..just logged in this morning, (Tuesday 1st October), using Firefox and it workedd fine???

Strange... Which version? I'm on 130.0.01, which seems to be the latest (on Linux, at least)?

You shouldn't be having any trouble on Firefox/Linux. I managed to get it working on a security hardened build by disabling Enhanced Tracking Protection and allowing an auto-blocked third party script as detailed upthread. There is an occasional issue with SMS codes not being sent, but that seems to be on their side.

codetown2

Can anyone confirm if the web access is working now? 
I have had the 'page not found' issue exactly as reported on the first message last month. But it was solved.
Now I have not been able to login (same error) for 2 days and I need to send some money out!
I tried all existing browsers and the error is the same!

EDIT: I tried again and discovered that the Coventry login works with OPERA. Hope this helps someone!
(not working with firefox or chrome)

UKX69

I logged in ok at 6pm on Safari.

AmityNeon

masonic said:

masonic said:

mikb said:

musicman100 said:

Hi Just spent ages on the phone with Coventry. She told me Firefox is not supported any more!! It says it is not secure!!! Which is a stupid reason since firefox is one of the most secure browsers.

Not a bright policy. Firefox is more secure than the organised spyware tool masquerading as Chrome!

Oh well, I guess when I have any queries etc. I'll just have to phone them up?

The issue seems to be that Firefox is not insecure enough for the various tracking Coventry BS has added to its online banking site recently, having dropped the less intrusive service from Gemalto/Thales.

It is possible to get to the balance quickview, but you will need to do the following:

• Disable enhanced tracking protection for the site
• Allow scripts from https://mpsnare.iesnare.com (this is a fraud analytics service from Transunion)

It is not possible to get the SMS or automated call for a full login.

There are lots of tracking and other analytics that get in the way. Something is presumably being blocked for security reasons that the second stage login depends on. It is quite disappointing that they've taken this approach.

Edit: Now I've tried using Chrome and the app, and I'm not getting SMS or an automated phonecall from any of them! All of them get to the screen asking me to enter the code (or with the code in the case of the automated call)

SMS codes arriving again now. I can now log in on all devices and browsers including Firefox (subject to the configuration above)

I emailed Coventry BS regarding this (technical details included) and predictably, they responded with incorrect and outdated information:

If you’re using Firefox, we recently applied some updates to our site and this browser is no longer supported.

If you’re using Google Chrome, this will also need to be updated to their latest version, released on the 20th September.

If you're using a VPN this will need to be disabled, if you're using any anti-virus software or AdBlockers you need to add ‘coventrybuildingsociety.co.uk’ and ‘gemaltodigitalbankingidcloud.com’ to your safe list to be able to receive the One Time Passcode for Online Services.

From my testing, Firefox's Enhanced Tracking Protection can remain enabled, but in Standard Mode. Cookies from mpsnare.iensare.com and first.iovation.com can be blocked (and Standard Mode blocks these by default as they are cross-site tracking cookies), but Tracking Content from the same two domains must be allowed (and again, Standard Mode allows these by default). Allowing Tracking Content for iesnare but completely blocking iovation caused errors.

With this configuration (also equivalently applied to other browsers), I am able to successfully receive OTPs.

vadek

I've just encountered this problem this week. I clicked to get a code via SMS and got Page Not Found. I normally use Firefox but I tried Chrome and Edge with the same results. I tried turning off all my known ad and tracker blockers but still no success. I contacted The Coventry and this issue went to their IT department. Subsequently, I couldn't even log in, and I couldn't create a new online account as I get Page Not Found even if I tell it to call my landline! I've rather gone off The Coventry.

fluffy_kittens47

Me too! Cannot get text message to phone as i'm unwilling to enable the dodgy-looking 'new' scripts on their login page.

Unless they remove them, looks like it will be phone only for me. I've also gone off The Coventry!