Voytek wrote:


<quote who="Greg Andle">

No, its not possible (I work for the stg bank in internet banking)And

doing so would be an idiotic practice that just throws security out the door.

that's what I thought.
CommBank would have to be likewise...?

this guy insists he started his notebook, browser, and, ended logged up to
someone's bank account...

i mean, evem if someone used his notebbok at lunch break, then shut it
down, this shouldn't happen ?




Most likely the person before him has hit yes to the browser asking him to save his password. Most users just hit enter without thinking to messages anyway. This would mean that when he went to the same site, the browser would very helpfully pre-enter the client id and password for him. Simply pressing enter would log him in.


Yes, CommBank allows username and passwords to be saved in browser - it's a simple html interface so there's not much they can do to stop it with such an interface.

Fil
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to