My bank has security image + security user written sentence. If I don't see a bi... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

Karawebnetwork on Oct 24, 2016 | parent | context | favorite | on: We Got Phished

My bank has security image + security user written sentence.

If I don't see a big goofy dog saying "Who's a good boy? [my dog's name] is a good boy!", I know I'm not on the right website.

startling on Oct 24, 2016 [–]

So, what's stopping the wrong site from making those requests to your bank and proxying the image?

Tortoise on Oct 24, 2016 | [–]

The bank sets a cookie on your machine and only displays the image if you have the cookie. You won't get the image on a machine you've never used to log in before.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact