Reply to: NatWest online banking

[Chugnut]

I got mine a few days ago. Not sure its going to make it anymore secure as if you can steal my card and get my pin out of me then you can access banking.

Which is what you would have been able to o by stealing my banking pin from me in the first place. I suppose its more a defence against the key loggers on peoples PCs more than anything.

Shame my business accounts doesnt look like it will get the same protection.

ANd yes, it does look like a very naff calculator.

Some of these have a duress mode. If you enter the last digit of your PIN and/or the random bit, the system knows you're being forced to access your account, and scrambles the SWAT team to your position.

[Sockpuppet]

I got mine a few days ago. Not sure its going to make it anymore secure as if you can steal my card and get my pin out of me then you can access banking.

Which is what you would have been able to o by stealing my banking pin from me in the first place. I suppose its more a defence against the key loggers on peoples PCs more than anything.

Shame my business accounts doesnt look like it will get the same protection.

ANd yes, it does look like a very naff calculator.

[Chugnut]

I don’t think so? I'll have a look tonight, I think it only accesses info on the card and doesn't actually have any real time encryption... it looks like a cheap calculator to me.

These things usually change the number displayed on the token every minute. You enter, say, a 10 digit number based on a 4 digit PIN plus the currently displayed 6 digits on the token. The server will do all the clever stuff, including keeping a database of all the tokens (and any drift they may suffer) from an "agreed" server time.

[gingerjedi]

Does it have RSA SecurID written on it anywhere? That's what the chaps here use for VPN.

I don’t think so? I'll have a look tonight, I think it only accesses info on the card and doesn't actually have any real time encryption... it looks like a cheap calculator to me.

[Moscow Mule]

The card reader came in the post yesterday, it doesn't connect to your PC in any way, when online you're asked to key in certain things that return encrypted codes.

Does it have RSA SecurID written on it anywhere? That's what the chaps here use for VPN.

[gingerjedi]

The card reader came in the post yesterday, it doesn't connect to your PC in any way, when online you're asked to key in certain things that return encrypted codes.

[xoggoth]

When did accessing an online bank account just bring up a box with a UID and password? All the ones I use require individual chars from your pin and password to be entered in a different order every time, you can't just click remember password.

[NickFitz]

Yep, the chances of them providing a driver for MAC OS X are slim...

Not necessarily; they were one of the first UK banks to officially support Safari for their online banking, so they are at least aware that Windows isn't the only OS in the world.

If they cock it up and it isn't supported on OS X, I'll just fire up a Parallels VM - the best of both worlds

[~Craig~]

HSBC use RSA type tokens with their online business banking. I got one when I opened my account and it works well.

Card readers sound a pain in the arse. How many numpty's are gonna be phoning HSBC trying to install it.

[angusglover]

Yep, the chances of them providing a driver for MAC OS X are slim...but I agree, if it does not work then I will have no choice...

[gingerjedi]

Haven't had any letters, but if the card reader doesn't work on my Mac I'll be changing banks...

Don't they do a shiny white one then?

[Cowboy Bob]

Haven't had any letters, but if the card reader doesn't work on my Mac I'll be changing banks...

[ControlG]

Yep. I've had the same letter. It arrived a couple of weeks ago but I haven't received the card reader yet.

[Xenophon]

That or he's oe of the guys involved in Meerkat's VAT fraud

Meerkat - how is that new Bugatti Veyron?

[DaveB]

You really are a 'Euro-commuter' then!

That or he's oe of the guys involved in Meerkat's VAT fraud