Re: [News] HSBC: Windows Flaws Are Not Our Problem (not a real quote)

["Oliver Wong" <owong@xxxxxxxxxxxxxx>]

> __/ [ Lee Sau Dan ] on Friday 11 August 2006 14:07 \__
>
> > > > > > > "[H]omer" == [H]omer  <H> writes:
> >
> >     [H]omer> (username, A/C number. -> Where were you born, mother's
> >     [H]omer> maiden name. -> select character 1, 3 and 4 from your
> >     [H]omer> password. Or something similar). The exact questions
> >     [H]omer> asked are rotated from a selection, so you're not always
> >     [H]omer> asked the same questions each time you logon.
> >
> > So,  a combined key-logger+screen-recorder  would break  this security
> > scheme, right?

   Or an HTTPS aware packet sniffer?

[...]

"Roy Schestowitz" <newsgroups@xxxxxxxxxxxxxxx> wrote in message 
news:2044602.XccZt5z1Qy@xxxxxxxxxxxxxxxxxx
> What's more, after 3 unsuccessful login attempts, the
> account is locked and this requires a phonecall and a letter
> with  activation  code to be sent by post. It's more  of  an
> inconvenience than a measure of security.

   I supposed you've heard the news stories of banks and credit card 
companies suspending your account upon detection of "suspicious" activity, 
like taking a vacation, or buying a new car?

   - Oliver