Re: CITIBANK [CANADA]: INTERNET EXPLORER BROWSERS

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



http-equiv@excite.com wrote:
Sunday, December 29, 2002

There is a small silly hitch with CITIBANK CANADA's secured sign in to online banking:

https://citibankcanada.ebilling.com/index.jhtml

Specifically AUTOCOMPLETE="off" in the forms. It is not set.

While much explanation is made about SSL connections and fancy digital certificates, the simplest of web programming errors Thwarte ! all that:

CITIBANK CANADA's login allows for the Microsoft Internet Explorer autocomplete feature to function. What that does is remember your name and password. So on a public or even private machine, all one needs to do is, double click the "name" form and the password will automicrosoftly autocomplete [fill in].
This is, of course, a fault in IE, not Citibank.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff


[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux