Re: are online companies breaking password manager?



On Sat, 25 Feb 2006 20:52:20 GMT, MrC <spamno@xxxxxxxxxxxxxxxxx> wrote:

My credit card company's online login page changed in
design recently and now I have to manually type
my username and password into the form to get in.

More to the point -- are you not concerned that somebody can access
your credit card details by visiting their site on your computer?

My Internet banking access requires AccessID, PIN and Authentication
Key from a hardware keytag device -- that way even if a login session
was captured it cannot be replayed as the authentication key will
not be valid.

I'm thinking that
the new design hides the "user id" and "password"
strings as a small image so mozilla can't recognize
it's a login form? How else would this happen?

Dunno, I disable password managers. Doesn't surprise me they'd
try to sidestep them, I take it 'view source' doesn't tell you
much?

I'm guessing banking companies have decided they
don't like Password managers.

They're non-secure, and too many people are being burned by
(windoze) keystroke loggers, etc.

I'm using mozilla 1.7.12 on Fedora core 4
Shouldn't matter -- this is (or should be) OS and browser neutral.

Grant.
--
.... The computer scientist, who had listened to all of this said,
"Yes, but where do you think the chaos came from?"
.