(Untitled)

[pseudomonas]

████ ██ ████ ██ ████ ██ ████ █████████ ██████████ ████████ █████ ██████ █████████ ██ ████████████ ████████ ███ ██ ████ ██ ███████ ███████ ███████ ████ ███████ ███ ████ ████ ████████ ██ ████████ ████ █ ███ █████ ███ ████ ██ ███ ███████████ ███ ████ ████ ████ ███ ████ █████ ███████████ ██ ██████████

Comments

[shortcipher]

Not only that, but their partial-pass-number thing: ARGH. FFS, what you do is store, per-user, which 3 digits they have to enter next, like TSB does, so they can't play the fruit-machine game by reloading the URL without the ID=... a few times. *headdesk*.

[pseudomonas]

Tell me about it. I'm sure even I could come up with something better. And their daft way that you have a place and a date as two memorable details, and then either of them will do. I wonder what proportion of people have "London" as their place.

[gerald_duck]

OK. Now the depressing bit.

You can't be safe by not using the service; the only way to be safe is by having Nationwide agree that the service cannot be used in your name.

I wonder how easy it will be for you to get the online service cancelled now you have it?

[pseudomonas]

The thing is, I probably *will* keep using it, at least for the time being. I ought to write to Nationwide and complain though. I've just realised that the only way one knows that nationet.com is theirs, besides reading the certificate and deciding I probably trust Verisign not to have fucked up is from having been redirected to it from http://www.nationwide.co.uk. That's not SSLed, and vulnerable to man-in-the-middle and all kinds of other nasty crap.

[randomchris]

I see no padlocks... (MIE6 - maybe they only show up on Mozilla/Firefox?)

[pseudomonas]

This is after you've clicked on the link to log in to an account.

[pseudomonas]

I tell a lie, it's on the nationwide.co.uk page, by the link to log in.