Finextra community home

Please Engage Brain

Keith Appleyard - available for hire - Bromley | 17/04/2013 | 3827 views

National Savings and Investments are rather too lethargic

National Savings & Investments : Once you've bought your Premium Bonds online then you are ’obliged’ to register with NS&I’s "Online and Phone Service", ostensibly for your “Security and Convenience”. Until they’ve processed your registration (which has to be done on paper), you can’t access your ... Tags: Security, Mobile & onlineGroup: Whatever...

Keith Appleyard - available for hire - Bromley | 28/01/2013 | 2496 views

RBS Internet Banking is not for the English

I had fun with RBS Internet Banking on Sunday. When I went to Login as usual via a page dedicated to RBS Customers in England, I got an error message that my Login credentials hd not been recognised. I contacted their Help Desk via Chatroom, and they assured me everything was working correctly, and what I needed to do was delete all my Cookies &am... Tags: Mobile & onlineGroup: Whatever...

Keith Appleyard - available for hire - Bromley | 26/06/2012 | 2994 views | 5 comments

RBS don't seem to understand basic book-keeping rules

RBS is reported as saying that all Customer Accounts are back to normal. They may well be from a monetary perspective, but the data still remains corrupt. I now have on my Business Account 3 BACS credits, one for nearly £500, all with a generic description of “RBS TRANS 220612”, which fails to identify the Customer or the Invoic... Tags: Online banking, PaymentsGroup: Whatever...

Keith Appleyard - available for hire - Bromley | 13/01/2012 | 2781 views

PCI is not onerous - it's too weak

Despite all the bleating about PCI over the years, I found it to be too weak. With all the focus on Cardholder Data - as being that on the Mag Stripe - namely Cardnumber, Cardholder Name, Expiry Date and Security Code - I found many Merchants & Service Providers treated it as a 'max' rather than 'min' level of security. I performed due dilige... Tags: Cards, PaymentsGroup: Whatever...

Keith Appleyard - available for hire - Bromley | 16/06/2011 | 3700 views | 1 comment

Citi demonstrates lack of good Security practice - ditto BBC

As reported, this greatly surprises me - apparently placing the Credit Card number within the URL, and thus by changing the URL exposes other Credit Card details within having to go through the Access Validation routine. On the one hand you'd assume the system designers didn't 'actually' specify it to be this way, but that the programmer didn't as... Tags: Cards, SecurityGroup: Whatever...