Microsoft warning over browser security flaw

[Rik]

You're not on commission, are you, Dorset?

[DorsetBoy]

You're not on commission, are you, Dorset?

I wish.

[pctech]

So is their active scripting something that is fundamental to accessing the site at all or is it only needed for some money management add-on that you can get by without?

I operate on-line bank accounts at Halifax, NatWest, Barclays and Nationwide. They all have different logon and authentication procedures but they all work perfectly in Firefox.

I think the reason they insist on IE for these type of products is because perhaps the code has been developed by a third party and bought in by them.

I've no idea why a plugin hasn't been developed for FF but in any case I would be uneasy about having security passwords stored on my PC even though I'm very rigourous with regard to security.

[armadillo]

Yes, I suppose the startups like Egg probably do buy in code as you suggest but the big banks like the ones I mentioned will have their own IT departments.

None of my banking sites stores a password on the PC and some of them make you jump through hoops to login - supply the 1st, 8th and 10th characters of your code word and the 2nd, 4th and 3rd of your PIN (which is not the same as the card PIN)

I do store other passwords on my PC and have never had a problem but, on every password protected site I have ever used, you can choose not to store them and simply enter them each time you login if you wish.

The only time I ever had a credit card hacked it was done in the real world, not in cyber land.

[pctech]

All the banks I deal with do that.

[Technical Ben]

Yes, I suppose the startups like Egg probably do buy in code as you suggest but the big banks like the ones I mentioned will have their own IT departments.

None of my banking sites stores a password on the PC and some of them make you jump through hoops to login - supply the 1st, 8th and 10th characters of your code word and the 2nd, 4th and 3rd of your PIN (which is not the same as the card PIN)

I do store other passwords on my PC and have never had a problem but, on every password protected site I have ever used, you can choose not to store them and simply enter them each time you login if you wish.

The only time I ever had a credit card hacked it was done in the real world, not in cyber land.

I like Barclays option. AFAIK it's a "onetime pad". Which is, for all intense and purpose uncrackable. They would have to physically steal your pin machine on your desk, plus your pin and card/cloned card to get on your internet banking.
Or just turn up to the bank in a convincing disguise. 

[pctech]

Two of the banks I have accounts with (Barclays and Natwest) have PIN machines.

I hope it doesn't become the standard otherwise I might end up with a drawer full 

[Glenn]

Nationwide use them too.

[pctech]

Now there's a company I'd never use personally.

My folks have the mortgage and insurance with them, when we all came home from work to find a hole in the extension roof one evening it took my Mum sbout two hours to get to speak to someone who could even begin to get an assessment and repair underway but they wouldn't send anyone out to even throw a tarpaulin over it because of health and safety in torrential rain.

We ended up staying up all night watching buckets fill up with water very slowly.

Luckily the rain stopped next day but took them a further two days to get a surveyor out and then another three for a temporary repair.

The surveyor told us that the whole ceiling would have to be replaced and all because they wouldn't do a thing.

[Rik]

I am insured with them and, when we had subsidence problems, Mitch, they couldn't have been more helpful. I guess you get lucky or unlucky depending on who's assigned to your case.

[pctech]

Indeed, we are going to 'shop around' though when the three years no claims limitation is up.

[Rik]

I can't. Once you've had subsidence, people get very reluctant to take you on - even for contents insurance.

[armadillo]

Two of the banks I have accounts with (Barclays and Natwest) have PIN machines.

I hope it doesn't become the standard otherwise I might end up with a drawer full 

Apparently, those machines are made to a standard. According to Barclays, you can use any bank's card reader for any other bank's card.

http://www.barclays.co.uk/Helpsupport/WhatyouneedwithPINsentry/P1242560258063

It's the last bullet point in "What you also need to know"

I just wish I'd "also known" that before waiting three weeks for Barclays to send me a reader when I already had a Natwest one.

[Rik]

Ah, but at least you got the right colour by waiting, Dill.

[Glenn]

I was insured with Nationwide up until 3 years ago, they paid a claim for my lost iRiver 320 MP3 player without any hassle whatsoever. The same when my kitchen window cracked, no fuss to ge it repaired, these are only small claims though.

[Rik]

Mine was about £16k in all, though they got 87% back from the Council in the end. They were very thorough in their monitoring, very good at including things to be replaced, eg patio door, and they moved us out for three weeks to save us having to try and camp in the one room which was unaffected. It was rather fun (though I'd have preferred not to go through it) as we ended up in a house right by the theatre district and could just walk over to take in a show. So we did.

[armadillo]

Yes, it is the prettiest card reader I've ever seen.

As for Nationwide insurance, I'm glad to see they're making good use of the money I have in one of their savings accounts. I hope they don't make too many payouts before I want my money back

[Rik]

The underwriters change frequently, it was London & Edinburgh (Aviva) when I claimed, then it was Churchill, now it's Liverpool Victoria.

[Glenn]

Dill, take it out on Monday, my mortgage settlement arrives in their accounts then.

[Rik]

Quick, form a queue.

[armadillo]

Can't Glenn. It's a fixed interest bond.

[Technical Ben]

Two of the banks I have accounts with (Barclays and Natwest) have PIN machines.

I hope it doesn't become the standard otherwise I might end up with a drawer full 

Oh, but you can do a bit more on the Natwest one without the pin... 
But Barclays seems to ask EVERY time, so no little slip ups.

[Technical Ben]

I can't. Once you've had subsidence, people get very reluctant to take you on - even for contents insurance.

Yep. One of those cruel things. Until/unless the regulators offer some sort of portability of policies. Won't help with price though.
[edit]

Yes, it is the prettiest card reader I've ever seen.

As for Nationwide insurance, I'm glad to see they're making good use of the money I have in one of their savings accounts. I hope they don't make too many payouts before I want my money back

Insurance is not taken from savings accounts (it would never get replenished) but from a big pot of all the insurance premiums (minus costs/profit). This pot is large enough to (hopefully ) cover a natural disaster like a city flooding (but not the whole country! ) so you should be fine. Some companies share their pot though, so not sure if the overall coverage is shrinking.
You don't get returns on insurance pay outs, so no one would use them as investments.

[armadillo]

But Barclays seems to ask EVERY time, so no little slip ups.

There's a box you can tick on the Barclays payment screen so it doesn't ask every time you pay someone that you've paid before.

It's in the second part of their tour video, where they explain payments.
http://www.barclays.co.uk/Helpsupport/TourPINsentry/P1242559977752

In typical Barclays fashion, the lite version and the full version both show exactly the same video.

[armadillo]

Insurance is not taken from savings accounts (it would never get replenished) but from a big pot of all the insurance premiums

Indeed. Actually, I think there's some legal restriction on cross subsidy. They do fund mortgages from savings though but it would appear that they are not very forthcoming with mortgages at the moment anyway. I am not genuinely worried about savings and I don't have all my eggs in one basket.