<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: ING Direct&#8217;s New Security Feature</title>
	<atom:link href="http://www.bargaineering.com/articles/ing-directs-new-security-feature.html/feed" rel="self" type="application/rss+xml" />
	<link>http://www.bargaineering.com/articles/ing-directs-new-security-feature.html</link>
	<description>personal finance blog with anecdotes, advice and commentary.</description>
	<lastBuildDate>Sun, 12 Feb 2012 23:30:41 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
	<item>
		<title>By: Vickie Bartlett</title>
		<link>http://www.bargaineering.com/articles/ing-directs-new-security-feature.html/comment-page-1#comment-304654</link>
		<dc:creator>Vickie Bartlett</dc:creator>
		<pubDate>Sat, 30 May 2009 18:23:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.bargaineering.com/articles/ing-directs-new-security-feature.html#comment-304654</guid>
		<description>If it works from their server it sounds good, but if it works like my former bank&#039;s did, using a cookie on my computer than it sucks, I delete cookies when I close Firefox. Made it more of a pain than it was worth.

One of the things I do for all of my bills, is I have the sites bookmarked and only enter through my bookmarks. I use Roboform too, so if by chance the site was hijacked, my password information will not automatically be available like it is if I am at the correct site.</description>
		<content:encoded><![CDATA[<p>If it works from their server it sounds good, but if it works like my former bank&#8217;s did, using a cookie on my computer than it sucks, I delete cookies when I close Firefox. Made it more of a pain than it was worth.</p>
<p>One of the things I do for all of my bills, is I have the sites bookmarked and only enter through my bookmarks. I use Roboform too, so if by chance the site was hijacked, my password information will not automatically be available like it is if I am at the correct site.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Shawn L.</title>
		<link>http://www.bargaineering.com/articles/ing-directs-new-security-feature.html/comment-page-1#comment-12759</link>
		<dc:creator>Shawn L.</dc:creator>
		<pubDate>Fri, 21 Jul 2006 17:26:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.bargaineering.com/articles/ing-directs-new-security-feature.html#comment-12759</guid>
		<description>It&#039;s essentially a reverse-password.

You enter a password to prove you are who you are. They provide a password to prove you are on the right site, and not a phisher&#039;s site.

It&#039;s an old spy movie cliche. Simple, yet effective.</description>
		<content:encoded><![CDATA[<p>It&#8217;s essentially a reverse-password.</p>
<p>You enter a password to prove you are who you are. They provide a password to prove you are on the right site, and not a phisher&#8217;s site.</p>
<p>It&#8217;s an old spy movie cliche. Simple, yet effective.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: denon</title>
		<link>http://www.bargaineering.com/articles/ing-directs-new-security-feature.html/comment-page-1#comment-11548</link>
		<dc:creator>denon</dc:creator>
		<pubDate>Mon, 10 Jul 2006 03:41:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.bargaineering.com/articles/ing-directs-new-security-feature.html#comment-11548</guid>
		<description>hmm .. what&#039;s to stop a phishing site from suckering people into getting their basic info, then displaying the image? Is the image going to show up immediately based on a local cookie?

Either way, it seems like they could ask for basic creds, do a remote http pull from ING, get your image, and make you feel all warm and fuzzy, followed by a large ACH to Abudabi.</description>
		<content:encoded><![CDATA[<p>hmm .. what&#8217;s to stop a phishing site from suckering people into getting their basic info, then displaying the image? Is the image going to show up immediately based on a local cookie?</p>
<p>Either way, it seems like they could ask for basic creds, do a remote http pull from ING, get your image, and make you feel all warm and fuzzy, followed by a large ACH to Abudabi.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Darrin</title>
		<link>http://www.bargaineering.com/articles/ing-directs-new-security-feature.html/comment-page-1#comment-11455</link>
		<dc:creator>Darrin</dc:creator>
		<pubDate>Fri, 07 Jul 2006 21:20:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.bargaineering.com/articles/ing-directs-new-security-feature.html#comment-11455</guid>
		<description>Yeah...they&#039;re just copying BoA...but...it IS a good idea.

Darrin</description>
		<content:encoded><![CDATA[<p>Yeah&#8230;they&#8217;re just copying BoA&#8230;but&#8230;it IS a good idea.</p>
<p>Darrin</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Financial Freedumb</title>
		<link>http://www.bargaineering.com/articles/ing-directs-new-security-feature.html/comment-page-1#comment-11454</link>
		<dc:creator>Financial Freedumb</dc:creator>
		<pubDate>Fri, 07 Jul 2006 21:11:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.bargaineering.com/articles/ing-directs-new-security-feature.html#comment-11454</guid>
		<description>ING has been pretty aggressive about security...a plus.  I wish all financial institutions took security as seriously.</description>
		<content:encoded><![CDATA[<p>ING has been pretty aggressive about security&#8230;a plus.  I wish all financial institutions took security as seriously.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jason</title>
		<link>http://www.bargaineering.com/articles/ing-directs-new-security-feature.html/comment-page-1#comment-11439</link>
		<dc:creator>Jason</dc:creator>
		<pubDate>Fri, 07 Jul 2006 15:32:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.bargaineering.com/articles/ing-directs-new-security-feature.html#comment-11439</guid>
		<description>Yea, boa does use this.  I have had an account with them for several months because of a signup bonus and I think they added it shortly after I signed up.  At first I thought it was kinda annoying but the more I think about it it is a good idea.</description>
		<content:encoded><![CDATA[<p>Yea, boa does use this.  I have had an account with them for several months because of a signup bonus and I think they added it shortly after I signed up.  At first I thought it was kinda annoying but the more I think about it it is a good idea.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kira</title>
		<link>http://www.bargaineering.com/articles/ing-directs-new-security-feature.html/comment-page-1#comment-11437</link>
		<dc:creator>Kira</dc:creator>
		<pubDate>Fri, 07 Jul 2006 14:32:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.bargaineering.com/articles/ing-directs-new-security-feature.html#comment-11437</guid>
		<description>I think Bank of America is doing this too and I think it&#039;s a neat idea - although I think a lot of fraud thwarted by this could also be thwarted by people being a little smarter about what they click on. I worry though that the images could be cached somewhere on your computer and eventually somebody will figure out how to access them and display them on a phishing site.</description>
		<content:encoded><![CDATA[<p>I think Bank of America is doing this too and I think it&#8217;s a neat idea &#8211; although I think a lot of fraud thwarted by this could also be thwarted by people being a little smarter about what they click on. I worry though that the images could be cached somewhere on your computer and eventually somebody will figure out how to access them and display them on a phishing site.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

