Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Avoid Schwab Bank; incompetant password policies.

Avoid Schwab Bank; incompetant password policies.

Scheduled Pinned Locked Moved The Lounge
comsecurityquestionlounge
10 Posts 6 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • D Offline
    D Offline
    Dan Neely
    wrote on last edited by
    #1

    In the past I've sung their praises here for offering a free interest bearing checking and refunding 3rd party ATM fees. However it turns out that they're silently truncating passwords at the 8 character mark. :mad::mad::mad::mad::mad::mad::mad: Can anyone recommend a bank with a free checking account that refunds random 3rd party ATM fees? An interest bearing account would be a plus as well; but at current rates getting the occasional ATM fee waived would be worth more so that's secondary. http://arstechnica.com/security/2013/04/why-your-password-cant-have-symbols-or-be-longer-than-16-characters/[^]

    Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

    H K P M R 5 Replies Last reply
    0
    • D Dan Neely

      In the past I've sung their praises here for offering a free interest bearing checking and refunding 3rd party ATM fees. However it turns out that they're silently truncating passwords at the 8 character mark. :mad::mad::mad::mad::mad::mad::mad: Can anyone recommend a bank with a free checking account that refunds random 3rd party ATM fees? An interest bearing account would be a plus as well; but at current rates getting the occasional ATM fee waived would be worth more so that's secondary. http://arstechnica.com/security/2013/04/why-your-password-cant-have-symbols-or-be-longer-than-16-characters/[^]

      Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

      H Offline
      H Offline
      H Brydon
      wrote on last edited by
      #2

      Dan Neely wrote:

      Can anyone recommend a bank with a free checking account that refunds random 3rd party ATM fees?

      I'm actually surprised that a bank exists that does this sort of thing. I would suggest that you instead go with a credit union. They are more service and member oriented and don't typically charge all the nuisance fees of the big banks. [Do Savings and Loan organizations still exist? I used them in the 1980s and was happy with them as well. I don't see any around any more though...]

      -- Harvey

      1 Reply Last reply
      0
      • D Dan Neely

        In the past I've sung their praises here for offering a free interest bearing checking and refunding 3rd party ATM fees. However it turns out that they're silently truncating passwords at the 8 character mark. :mad::mad::mad::mad::mad::mad::mad: Can anyone recommend a bank with a free checking account that refunds random 3rd party ATM fees? An interest bearing account would be a plus as well; but at current rates getting the occasional ATM fee waived would be worth more so that's secondary. http://arstechnica.com/security/2013/04/why-your-password-cant-have-symbols-or-be-longer-than-16-characters/[^]

        Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

        K Offline
        K Offline
        kornman00
        wrote on last edited by
        #3

        But you're required to either be a service member/vet yourself or have (immediate?) family who is/was

        1 Reply Last reply
        0
        • D Dan Neely

          In the past I've sung their praises here for offering a free interest bearing checking and refunding 3rd party ATM fees. However it turns out that they're silently truncating passwords at the 8 character mark. :mad::mad::mad::mad::mad::mad::mad: Can anyone recommend a bank with a free checking account that refunds random 3rd party ATM fees? An interest bearing account would be a plus as well; but at current rates getting the occasional ATM fee waived would be worth more so that's secondary. http://arstechnica.com/security/2013/04/why-your-password-cant-have-symbols-or-be-longer-than-16-characters/[^]

          Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

          P Offline
          P Offline
          peterchen
          wrote on last edited by
          #4

          Charles Schwab does offer a free “security token” to interested customers that generates a six digit number for them to enter alongside a password.

          ORDER BY what user wants

          D 1 Reply Last reply
          0
          • P peterchen

            Charles Schwab does offer a free “security token” to interested customers that generates a six digit number for them to enter alongside a password.

            ORDER BY what user wants

            D Offline
            D Offline
            Dan Neely
            wrote on last edited by
            #5

            peterchen wrote:

            Charles Schwab does offer a free “security token” to interested customers that generates a six digit number for them to enter alongside a password.

            You'd need to trust them to have implemented it correctly. I don't trust anyone stupid enough to cap passwords like that of being able to remember to breathe without a hob whispering in his ear. "breathe in.... breathe out..."

            Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

            P 1 Reply Last reply
            0
            • D Dan Neely

              In the past I've sung their praises here for offering a free interest bearing checking and refunding 3rd party ATM fees. However it turns out that they're silently truncating passwords at the 8 character mark. :mad::mad::mad::mad::mad::mad::mad: Can anyone recommend a bank with a free checking account that refunds random 3rd party ATM fees? An interest bearing account would be a plus as well; but at current rates getting the occasional ATM fee waived would be worth more so that's secondary. http://arstechnica.com/security/2013/04/why-your-password-cant-have-symbols-or-be-longer-than-16-characters/[^]

              Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

              M Offline
              M Offline
              Marc Clifton
              wrote on last edited by
              #6

              Undoubtedly a COBOL back-end with a fixed length password field. ;) Marc

              Testers Wanted!
              Latest Article: User Authentication on Ruby on Rails - the definitive how to
              My Blog

              D H 2 Replies Last reply
              0
              • D Dan Neely

                peterchen wrote:

                Charles Schwab does offer a free “security token” to interested customers that generates a six digit number for them to enter alongside a password.

                You'd need to trust them to have implemented it correctly. I don't trust anyone stupid enough to cap passwords like that of being able to remember to breathe without a hob whispering in his ear. "breathe in.... breathe out..."

                Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

                P Offline
                P Offline
                peterchen
                wrote on last edited by
                #7

                I'd guess that there is a healthy mix of red tape, crypto-incompetence and black ice that makes it more expensive for the banks to change their authentification system than pay a bunch of lawyers stamping "identity theft, not our fault" everywhere.

                ORDER BY what user wants

                1 Reply Last reply
                0
                • M Marc Clifton

                  Undoubtedly a COBOL back-end with a fixed length password field. ;) Marc

                  Testers Wanted!
                  Latest Article: User Authentication on Ruby on Rails - the definitive how to
                  My Blog

                  D Offline
                  D Offline
                  Dan Neely
                  wrote on last edited by
                  #8

                  Probably; and a half dozen years ago I might have let it slide. Today though, with 8 char passwords being well into brute force range I want something significantly harder for critical accounts. That does raise an interesting question though, would using pkbdf, bcrypt, or scrypt slow a cracking attempt down enough to make 8 characters long enough to be safe.

                  Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

                  1 Reply Last reply
                  0
                  • M Marc Clifton

                    Undoubtedly a COBOL back-end with a fixed length password field. ;) Marc

                    Testers Wanted!
                    Latest Article: User Authentication on Ruby on Rails - the definitive how to
                    My Blog

                    H Offline
                    H Offline
                    H Brydon
                    wrote on last edited by
                    #9

                    Marc Clifton wrote:

                    Undoubtedly a COBOL back-end with a fixed length password field

                    ... and a 2 digit year field.

                    -- Harvey

                    1 Reply Last reply
                    0
                    • D Dan Neely

                      In the past I've sung their praises here for offering a free interest bearing checking and refunding 3rd party ATM fees. However it turns out that they're silently truncating passwords at the 8 character mark. :mad::mad::mad::mad::mad::mad::mad: Can anyone recommend a bank with a free checking account that refunds random 3rd party ATM fees? An interest bearing account would be a plus as well; but at current rates getting the occasional ATM fee waived would be worth more so that's secondary. http://arstechnica.com/security/2013/04/why-your-password-cant-have-symbols-or-be-longer-than-16-characters/[^]

                      Did you ever see history portrayed as an old man with a wise brow and pulseless heart, waging all things in the balance of reason? Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful? --Zachris Topelius Training a telescope on one’s own belly button will only reveal lint. You like that? You go right on staring at it. I prefer looking at galaxies. -- Sarah Hoyt

                      R Offline
                      R Offline
                      Roger Wright
                      wrote on last edited by
                      #10

                      I've been using Ally.com as my primary bank for a while now, and I'm really quite pleased with their performance. I don't know about truncating passwords, but they do everything else right.

                      Will Rogers never met me.

                      1 Reply Last reply
                      0
                      Reply
                      • Reply as topic
                      Log in to reply
                      • Oldest to Newest
                      • Newest to Oldest
                      • Most Votes


                      • Login

                      • Don't have an account? Register

                      • Login or register to search.
                      • First post
                        Last post
                      0
                      • Categories
                      • Recent
                      • Tags
                      • Popular
                      • World
                      • Users
                      • Groups