Hacker News new | ask | show | jobs
by swat535 2950 days ago
What really bothers me about these banks is that they attempt to keep their platforms secure by things like disabling the back button. Just so that hypothetically, if somehow a person has access to your physical machine, they can't just press back and view a cached copy of your account. Yet they fail on actual security practices. No 2FA - check Maximum password length of 6 characters - check Storing / Sending passwords in pain text - check The list goes on.

It boggles my mind that institutions with such financial power, fail to employ these practices.

It's clearly not a question of cost..