03 October 2007
Unnecessary authentication
After a long time I called up my share broker customer support. They are India’s one of the best and biggest broker.
I was greeted with an automated message “please dial your customer id”. I did. And then “please enter your PIN”. I did. And then comes the automated message – “this service is available only between 10AM -6PM”
Bulldung. If they service is not available why ask for user id and PIN. Why increase attack surface unnecessarily??
As I said, security is not just eight letter word. It’s a state of mind.
Comment Notification
If you would like to receive an email when updates are made to this post, please register here
Subscribe to this post's comments using
Comments
Leave a Comment
Comment Policy: No HTML allowed. URIs and line breaks are converted automatically. Your e–mail address will not show up on any public page.