Comments on: Online Security Gone Mad http://blog.whatclinic.com/2009/04/online-security-gone-mad.html Sharing Tech, Marketing & Health 2.0 information Sat, 11 Feb 2012 20:40:18 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: A Happy Bankline User http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-8565 A Happy Bankline User Fri, 11 Nov 2011 17:19:32 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-8565 I don't understand how people are complaining on this blog about their business accounts online being so secure?!?! I am happy the security is so high! The last thing I want is somebody hacking my bank account. It is not difficult for me to remember a 4 digit PIN code and an 8 digit password. My password expiry is never so I don't have to change it and my smartcard PIN iss the same as my log in. I don’t understand how people are complaining on this blog about their business accounts online being so secure?!?! I am happy the security is so high! The last thing I want is somebody hacking my bank account.

It is not difficult for me to remember a 4 digit PIN code and an 8 digit password. My password expiry is never so I don’t have to change it and my smartcard PIN iss the same as my log in.

]]> By: Another Pissed off Bankline User http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-8546 Another Pissed off Bankline User Tue, 08 Nov 2011 11:40:06 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-8546 Bankline is still crap. It remains to be crap after all this time but then RBS are a bust Bank. So why do we bother? Bankline is still crap. It remains to be crap after all this time but then RBS are a bust Bank. So why do we bother?

]]> By: Chris http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-1972 Chris Fri, 04 Jun 2010 16:46:01 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-1972 I'm glad to see I'm not the only one who thinks Bankline is a disaster re usability. Today have suceeded in locking out my smartcard. Got confused as to which pin was which. This system is a nightmare for anybody like me who has trouble remembering my phone number. I used Ulsterbank Anytime without a hitch and use Rabo direct without probs. Seriously thinking of moving banks. Are BOI or AIB any better ? I’m glad to see I’m not the only one who thinks Bankline is a disaster re usability. Today have suceeded in locking out my smartcard. Got confused as to which pin was which. This system is a nightmare for anybody like me who has trouble remembering my phone number.
I used Ulsterbank Anytime without a hitch and use Rabo direct without probs.
Seriously thinking of moving banks.
Are BOI or AIB any better ?

]]> By: Dennis Herlihy http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-1691 Dennis Herlihy Mon, 26 Apr 2010 11:56:13 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-1691 It would be a pleasure to get locked out, that would mean that you actually got it to work in the 1st place? and yes I have half the Brazilian rainforest coming through my letterbox probably going to give up and ring in for the balance like the old days..... It would be a pleasure to get locked out, that would mean that you actually got it to work in the 1st place?

and yes I have half the Brazilian rainforest coming through my letterbox

probably going to give up and ring in for the balance like the old days…..

]]> By: David http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-1458 David Mon, 22 Mar 2010 16:23:37 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-1458 Christine, I could not agree with you more. The Bankline web site is a complete retrograde step and is way over developed. I have made my feelings known many times to Ulster Bank as the system is a nightmare to use. I run a business in Dublin and am now meeting with AIB (where I also bank) to move my full banking requirments to them. Thier on line system is far more efficient. Any web site that uses terminology like " super user" makes me nervous. PS. I heard that Bankline cost in the region of €10 million. GO FIGURE !!. Christine,

I could not agree with you more. The Bankline web site is a complete retrograde step and is way over developed. I have made my feelings known many times to Ulster Bank as the system is a nightmare to use. I run a business in Dublin and am now meeting with AIB (where I also bank) to move my full banking requirments to them. Thier on line system is far more efficient.

Any web site that uses terminology like ” super user” makes me nervous.

PS. I heard that Bankline cost in the region of €10 million. GO FIGURE !!.

]]> By: william http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-1416 william Mon, 15 Mar 2010 16:48:27 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-1416 guys , this system is soooooooooooooooooo frustrating, woke up one morning , i was locked out! why i asked ? o you have been accessing the website from a drop down menu or favorites..? have you? well yes i said ,thats the problem the SITE DOES NOT SUPPORT THAT! you have to get a fresh browser and type in the address manually all the time .... THATS THE ONLY WAY TO AVOID BEEN LOCKED OUT. now you have to request a new pin by . 1.downloading a form 2 fill it up 3 fax back to us and we will send your activation pin , now 3 hours later no pin....ha its too early said one, no its your yahoo filters said another , sorry you have to refax another form as we cant resend the pin again . i did still no pin.ahhhhhhhhhhhhhhhhhh ok i calm down after 1 hour and call again , we are in the process of changing email address.... you guys dont want to know what that takes now , maybe i should just jump in the river... bye guys , this system is soooooooooooooooooo frustrating, woke up one morning , i was locked out! why i asked ? o you have been accessing the website from a drop down menu or favorites..? have you? well yes i said ,thats the problem the SITE DOES NOT SUPPORT THAT! you have to get a fresh browser and type in the address manually all the time …. THATS THE ONLY WAY TO AVOID BEEN LOCKED OUT. now you have to request a new pin by .
1.downloading a form 2 fill it up 3 fax back to us and we will send your activation pin ,
now 3 hours later no pin….ha its too early said one, no its your yahoo filters said another , sorry you have to refax another form as we cant resend the pin again . i did still no pin.ahhhhhhhhhhhhhhhhhh
ok i calm down after 1 hour and call again , we are in the process of changing email address…. you guys dont want to know what that takes now , maybe i should just jump in the river… bye

]]> By: bill http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-1355 bill Mon, 01 Mar 2010 22:22:03 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-1355 I have to agree with all the other disgruntled users. It's a joke, it's completely overkill for small business. I never had one bit of hassle with anytime for 8 yrs, it did everything I wanted to with not one breach or bit of hassle, The whole process has been designed to put the onus on the user and not the bank to apply ( which took 3 times in my case) I of course forgot some details after i registered, Moved house and couldn't find all the paperwork - inevitably I got locked out, which brings me to another point. I filled out one piece of paper when I started anytime and that was it for over 8 yrs, I have so far between adding other accounts and re-applying for an authorisation codes and applying in the fir place (3 times!) used about 30 sheets of paper which is not much but I only use about 100 sheets of paper in an entire year in my office so multiply this by the 10'000's of users doing this!!! it's a joke security or not with no regard for the customer and is quite simply LAZY! Bad bank!! I am seriously looking at swapping banks over it… nightmare! I have to agree with all the other disgruntled users. It’s a joke, it’s completely overkill for small business. I never had one bit of hassle with anytime for 8 yrs, it did everything I wanted to with not one breach or bit of hassle, The whole process has been designed to put the onus on the user and not the bank to apply ( which took 3 times in my case) I of course forgot some details after i registered, Moved house and couldn’t find all the paperwork – inevitably I got locked out, which brings me to another point. I filled out one piece of paper when I started anytime and that was it for over 8 yrs, I have so far between adding other accounts and re-applying for an authorisation codes and applying in the fir place (3 times!) used about 30 sheets of paper which is not much but I only use about 100 sheets of paper in an entire year in my office so multiply this by the 10’000′s of users doing this!!! it’s a joke security or not with no regard for the customer and is quite simply LAZY! Bad bank!!

I am seriously looking at swapping banks over it… nightmare!

]]> By: Colm http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-1169 Colm Thu, 28 Jan 2010 14:37:33 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-1169 Just wanted to add my voice to the discussion. I fall somewhere in the middle. While I appreciate UBs attempt to increase security with Bankline, I feel they have gone too far. There needs to be a balance between security and usability but I feel usability has taken a firm back seat with this application. It's bad enough that I will probably end up moving my account to another bank.... Listening, Ulster Bank? Just wanted to add my voice to the discussion. I fall somewhere in the middle. While I appreciate UBs attempt to increase security with Bankline, I feel they have gone too far. There needs to be a balance between security and usability but I feel usability has taken a firm back seat with this application. It’s bad enough that I will probably end up moving my account to another bank….

Listening, Ulster Bank?

]]> By: Christian http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-949 Christian Sun, 06 Dec 2009 17:49:39 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-949 It a system of memory recall. Inspired by how some memory experts work to remember the order of a deck of cards tailored to my own needs here is an example and not the one I use. Pick a number and always use that - component A Pick a word and always use that - component B Pick a symbol or symbol set - component C Pick an association based on a rule or context - component D Set a rule on what order these are combined. Its very easy to remember many passwords as you are not so much remembering it but constructing it from a set routine which you remember but each password is essentially unqiue. Most people rightly find it easier to use the same pin for all credit cards and passwords for lots of websites this is the same but the end result is a uniquely generated password and thus fits both needs ease of use and security. It generally works most of the time. Yea I do forget the odd one but often I get it right and if I get it really wrong I do reset but with bankline you simply can't do it as you are not ever asked for you password but random pieces of your password. I've told Bankline I could remember 3 or more unique passwords that couldn't be any less secure than there own system but they don't give me the choice. In the case of banklline even when I have written it down I have still screwed up. I am once again locked out since last week. I wonder how many people have their Bankline pin, password and other details written down for easy recall. There is nothing easy to lend simple recall to their system. The human mind is a lot more powerful if engaged properly and thus security is less an issue as its behavior that ultimately undermines the best efforts of security. To summarise it a simple routine that can generate unique passwords. Let us not forget humans can memorise poems, stories, entire movie scripts and more so why engage the same ability when creating a security system. You can't change people its costly and always fails but you can create system that engages them more efficiently and this is a classic example of a system that is suspicious of peoples ability to be intelligent and secure and thus encourages people to do stupid things therfore undermining its core goal. I should write a paper on this methinks at this stage. It a system of memory recall. Inspired by how some memory experts work to remember the order of a deck of cards tailored to my own needs here is an example and not the one I use.

Pick a number and always use that – component A
Pick a word and always use that – component B
Pick a symbol or symbol set – component C
Pick an association based on a rule or context – component D

Set a rule on what order these are combined.

Its very easy to remember many passwords as you are not so much remembering it but constructing it from a set routine which you remember but each password is essentially unqiue.

Most people rightly find it easier to use the same pin for all credit cards and passwords for lots of websites this is the same but the end result is a uniquely generated password and thus fits both needs ease of use and security.

It generally works most of the time. Yea I do forget the odd one but often I get it right and if I get it really wrong I do reset but with bankline you simply can’t do it as you are not ever asked for you password but random pieces of your password. I’ve told Bankline I could remember 3 or more unique passwords that couldn’t be any less secure than there own system but they don’t give me the choice.

In the case of banklline even when I have written it down I have still screwed up. I am once again locked out since last week.

I wonder how many people have their Bankline pin, password and other details written down for easy recall. There is nothing easy to lend simple recall to their system.

The human mind is a lot more powerful if engaged properly and thus security is less an issue as its behavior that ultimately undermines the best efforts of security.

To summarise it a simple routine that can generate unique passwords.

Let us not forget humans can memorise poems, stories, entire movie scripts and more so why engage the same ability when creating a security system. You can’t change people its costly and always fails but you can create system that engages them more efficiently and this is a classic example of a system that is suspicious of peoples ability to be intelligent and secure and thus encourages people to do stupid things therfore undermining its core goal.

I should write a paper on this methinks at this stage.

]]> By: yeye http://blog.whatclinic.com/2009/04/online-security-gone-mad.html/comment-page-1#comment-940 yeye Sat, 05 Dec 2009 02:05:31 +0000 http://ibehealth.com/2009/04/online-security-gone-mad.html#comment-940 just one question. what do you mean you have a system for remembering passwords/codes, and that this system doesn't work with ulster bank? why? if you can remember any password, any number? just makes me very curious :) just one question. what do you mean you have a system for remembering passwords/codes, and that this system doesn’t work with ulster bank? why? if you can remember any password, any number? just makes me very curious :)

]]>