Hacker News new | past | comments | ask | show | jobs | submit login

ASB Bank in New Zealand allows a maximum of 8 characters for your passwords. Numbers and letters only.

That's right, all that stands between you and your account details is 8 characters.

If someone tries to transfer out over ~$200 then you get a text message on your phone - IF you've enabled that service. So it's not the end of the world, but it's still pretty terrible.




Yes, but (like most banks) I dare say they'd lock your account after 3 incorrect attempts, and you'd have to unlock it out-of-band (e.g. calling their call centre).


This is a good point.


And now i'm just waiting for the guy who commented earlier to take his dual 5970s and start brute-forcing ASB internet banking details.

Good thing i'm not with ASB.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: