Archive for the ‘Banks’ Category

Banks and Credit Card Companies Unsecure Login Workaround

Monday, January 15th, 2007

If you have not noticed by now, most banks, credit unions, and credit card companies do not have secure logins easily available. The login page is on an unsecured web page which means there is no simple way of verifying the login page is real or spoofed. We have written about this in a previous article. But there may be a way around this.

Go to your bank or credit card company login page. If the URL starts with https:// you are in luck - you can check the security information to make sure the web page belongs to the right entity. If the URL begins with http:// you are treading on dangerous ground. Enter a phony login id and password and try to login. Most likely an error will occur and now the login page URL begins with https:// - your lucky day. At least now the login page can be verified for correct ownership and the sensitive information sent to your bank/credit card company is secure and going to the right place.

I have tried this trick on several unsecure banking and credit card sites - and it worked every time!

Doug