Followup: Plaintext passwords in Chase Online Banking

From: dorqus (dorqusat_private)
Date: Sat Mar 21 1998 - 17:23:57 PST

  • Next message: Martin Schulze: "Re: bug in su (Slackware 3.4)"

    I received the following email from Chase Customer Service
    regarding my discovery of the fact that the offline password is kept
    in plain text on the users PC:
    
     Date: 3/17/98
     Subject: Chase online banking
    
     Thank you for your e-mail messages regarding the offline password in Chase
     Online Banking.  Chase has upgraded the offline password feature in the
     software and we will distribute this new version to all customers shortly.
     We have advised all Chase Online Banking customers to use an offline
     password that is different from their bank password.  The bank password
     is encrypted and needed to transact with the bank.  We hope you will
     continue to enjoy using Chase Online Banking.  Thank you, Nancy Mazolla
     Online banking customer service 1-800-336-3806
    
    I wonder if the new version will still have the password in plaintext
    or not, I guess I'll just have to wait until I get my new copy of the
    software :)
    
    Dorqus
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:46:39 PDT