On Fri, 18 Nov 2022 17:20:22 +0000, Dave W <davewi11@yahoo.co.uk>
wrote:

>On Thu, 17 Nov 2022 10:35:09 +0000, The Natural Philosopher
><tnp@invalid.invalid> wrote:
>
>>Has anyone had issues with Barclays online banking. I had to pay a bill
>>today, and while I think I managed to, the website is giving error after
>>error.
>>
>>It's the first time I have tried it with the latest Firefox though.
>
>On a related issue - I don't do online banking but I do use my
>Barclays debit card to pay for things online. Recently some of my
>payments were not accepted by the bank with no reason given, but I
>found I could make a number of payments of £100 until the total
>required was reached.
>
>I went into the bank to ask if they could increase the limit. They
>told me that they had recently introduced 2FA for transactions. It
>turned out that as I had never banked online they didn't know my email
>address or mobile phone number, so I never got any message saying
>they'd sent me a link for me to confirm the payment.
>
>I gave them both items so I'm hoping I can pay my next electricity
>bill with one payment. However they sent me a marketing email which I
>promptly unsubscribed from.

I don't think a debit card has a limit. The 'limit' is governed by
the available balance of your bank account (taking account of any
overdraft facility). I once bought a car with a debit card and this
presented no difficulty.

On Mon, 21 Nov 2022 10:51:32 +0000, Martin Brown
<'''newspam'''@nonad.co.uk> wrote:

>On 20/11/2022 15:50, Dave Plowman (News) wrote:
>> In article <jtv0agF88pqU1@mid.individual.net>,
>> Andy Burns <usenet@andyburns.uk> wrote:
>>> Dave Plowman wrote:
>>
>>>> Andy Burns wrote:
>>>>
>>>>> I never see a "dropdown digit password"
>>>>
>>>> Sorry - not drop down. But boxes you enter two digits from your memorable
>>>> word. I'd guess a way of stopping them being captured?
>>
>>> Presumably, but I don't get that, just a pair of four digit fields to enter the
>>> code generated by the phone or calculator thing, no memorable word.
>>
>>>> It's the easiest way to log on here.
>>
>> It first needs your 12 digit online banking code. Think this is the same
>> as my original debit card. Then the 5 digit online banking pass code. Was
>> sent that by post. You can have them remembered.
>
>It is a very bad idea to allow your PC to remember the password for banking.

A thoroughly bad idea. If someone enters your house while your
computer is on they can steal your money. I think this could be
regarded as a similar level of negligence to writing the PIN on a
Post-it note.
>>
>> So the only thing I have to enter is a (randomly asked for) two digits
>> from my memorable word. Which in my case isn't a word.
>
>They do vary a lot now. Lloyds uses password and three characters from
>magic phrase.
>
>I prefer banks that allow you to customise their home page with a
>personal greeting and/or picture. That makes for a very secure login. A
>mimic look-alike site can't guess what you have chosen.
>
>Most now tell you to put the last 4 digits of your bank card into the
>2FA device and then enter your PIN. It shows a 6 digit OTP code which
>effectively "proves" to the satisfaction of the bank that you are you.
>
>Of course you could be only doing it under duress (or have been tricked
>into doing it by some clever social engineering on a phone call).

Scott wrote:

> there's no need to remember the membership number as the site can be set to
> do this. I have no problem with this as I don't regard a 'membershp number'
> as being any more sensitive than an email address

No cookie lives longer than a day in this house ...

On Mon, 21 Nov 2022 12:30:25 +0000, Andy Burns <usenet@andyburns.uk>
wrote:

>
>Scott wrote:
>
>> there's no need to remember the membership number as the site can be set to
>> do this. I have no problem with this as I don't regard a 'membershp number'
>> as being any more sensitive than an email address
>
>No cookie lives longer than a day in this house ...

Well, I may be less risk-averse than you. I have CCleaner set up to
save cookies that I trust, which includes those from Barclays.

In article <n5qmnht605busbs5906m3nfusg3dhkktsd@4ax.com>,
Scott <newsgroups@gefion.myzen.co.uk> wrote:
> On Fri, 18 Nov 2022 17:20:22 +0000, Dave W <davewi11@yahoo.co.uk>
> wrote:

> >On Thu, 17 Nov 2022 10:35:09 +0000, The Natural Philosopher
> ><tnp@invalid.invalid> wrote:
> >
> >>Has anyone had issues with Barclays online banking. I had to pay a bill
> >>today, and while I think I managed to, the website is giving error after
> >>error.
> >>
> >>It's the first time I have tried it with the latest Firefox though.
> >
> >On a related issue - I don't do online banking but I do use my
> >Barclays debit card to pay for things online. Recently some of my
> >payments were not accepted by the bank with no reason given, but I
> >found I could make a number of payments of £100 until the total
> >required was reached.
> >
> >I went into the bank to ask if they could increase the limit. They
> >told me that they had recently introduced 2FA for transactions. It
> >turned out that as I had never banked online they didn't know my email
> >address or mobile phone number, so I never got any message saying
> >they'd sent me a link for me to confirm the payment.
> >
> >I gave them both items so I'm hoping I can pay my next electricity
> >bill with one payment. However they sent me a marketing email which I
> >promptly unsubscribed from.

> I don't think a debit card has a limit. The 'limit' is governed by
> the available balance of your bank account (taking account of any
> overdraft facility). I once bought a car with a debit card and this
> presented no difficulty.

I've done this, too. The first time, a phone call to the bank was needed to
confirm who I was. That was in the days of real Bank Managers.

--
from KT24 in Surrey, England - sent from my RISC OS 4té
"I'd rather die of exhaustion than die of boredom" Thomas Carlyle

On 21/11/2022 12:08, Scott wrote:

>>
>> It is a very bad idea to allow your PC to remember the password for banking.
>
> A thoroughly bad idea. If someone enters your house while your
> computer is on they can steal your money. I think this could be
> regarded as a similar level of negligence to writing the PIN on a
> Post-it note.

But surely anyone encountering an unattended switched on PC would come
up against a PIN protected screen lock. This is a trivial inconvenience
to give a great deal of security. Or are you suggesting that money can
still be stolen with a screen-locked PC?

Also to set up a new payee most banks need some form of 2FA so if you
are out with your mobile phone (and your bank card) they would not be
able to set up a new payee.

I would be more worried about hackers/scammers getting at the PC from
outside the house and interrogating the browser password store.

--
Chris B (News)

In article <jtv129F8bf8U1@mid.individual.net>,
Andy Burns <usenet@andyburns.uk> wrote:
> Dave Plowman wrote:

> > It first needs your 12 digit online banking code. Think this is the
> > same as my original debit card. Then the 5 digit online banking pass
> > code. Was sent that by post. You can have them remembered.
> >
> > So the only thing I have to enter is a (randomly asked for) two digits
> > from my memorable word. Which in my case isn't a word.

> Presumably you've never registered for smart phone banking, but I
> thought they sent everyone the "blue calculator" device, without asking?

I have one of those pinsentry devices. But only time I seem to need it is
when setting up a new payee - previous ones are remembered. I do have the
Barclay's app on my phone, but only ever used it to pay in a cheque. And
contactless payments. What I'd call banking I usually do at home on the
laptop.

--
*i souport publik edekashun.

Dave Plowman dave@davenoise.co.uk London SW
To e-mail, change noise into sound.

In article <ij4q4j-vlbd3.ln1@esprimo.zbmc.eu>,
Chris Green <cl@isbd.net> wrote:
> So if someone steals (or has access to your computer) they only have
> to guess two characters?

Some chance out of 8 and with only 3 goes.

--
*I didn't drive my husband crazy -- I flew him there -- it was faster

Dave Plowman dave@davenoise.co.uk London SW
To e-mail, change noise into sound.

In article <tlfh9u$3pe31$2@dont-email.me>,
wasbit <wasbit@nowhere.com> wrote:
> On 20/11/2022 15:50, Dave Plowman (News) wrote:
> > In article <jtv0agF88pqU1@mid.individual.net>,
> > Andy Burns <usenet@andyburns.uk> wrote:
> >> Dave Plowman wrote:
> >
> >>> Andy Burns wrote:
> >>>
> >>>> I never see a "dropdown digit password"
> >>>
> >>> Sorry - not drop down. But boxes you enter two digits from your
> >>> memorable word. I'd guess a way of stopping them being captured?
> >
> >> Presumably, but I don't get that, just a pair of four digit fields to
> >> enter the code generated by the phone or calculator thing, no
> >> memorable word.
> >
> >>> It's the easiest way to log on here.
> >
> > It first needs your 12 digit online banking code. Think this is the
> > same as my original debit card. Then the 5 digit online banking pass
> > code. Was sent that by post. You can have them remembered.
> >
> > So the only thing I have to enter is a (randomly asked for) two digits
> > from my memorable word. Which in my case isn't a word.
> >

> How many wrong entries do you get before it locks you out?

IIRC, 3. And my memorable word isn't actually a word nor is it stored
anywhere on my system. Only way to find it would be me, or hacking the
Barclay's system.

--
*What was the best thing before sliced bread? *

Dave Plowman dave@davenoise.co.uk London SW
To e-mail, change noise into sound.

On 21/11/2022 14:17, Chris B wrote:
> On 21/11/2022 12:08, Scott wrote:
>
>>>
>>> It is a very bad idea to allow your PC to remember the password for
>>> banking.
>>
>> A thoroughly bad idea.  If someone enters your house while your
>> computer is on they can steal your money.  I think this could be
>> regarded as a similar level of negligence to writing the PIN on a
>> Post-it note.
>
>
> But surely anyone encountering an unattended switched on PC would come
> up against a PIN protected screen lock.  This is a trivial inconvenience
> to give a great deal of security.  Or are you suggesting that money can
> still be stolen with a screen-locked PC?

Plenty of home users disable the screenlock password to <cr> or qwerty.

Come to that I have known senior managers who should know better have
their password on a postit attached to the side of their screen!

> Also to set up a new payee most banks need some form of 2FA so if you
> are out with your mobile phone (and your bank card) they would not be
> able to set up a new payee.

One of the cleverer recent scams involved stealing both and setting up a
new phone to be the master by using the OTP that flashes up on some
mobiles by default if the bank's preamble isn't long enough to hide it.

Once they have done that they can look up your bank card PIN using the
app on the newly registered phone. You & Yours did a piece on it
recently. There was another good one today too criminals putting fake QR
codes over the ones on carparks, pub tables and EV charger points that
redirect to a look alike site and steal your credentials.

> I would be more worried about hackers/scammers getting at the PC from
> outside the house and interrogating the browser password store.

The browser password store should be reasonably hard encrypted.
Keyboard sniffing by malware is much more of a risk (although again
there are tools to mitigate against that possibility).

--
Regards,
Martin Brown

In article <tlfl7t$flf$1@gioia.aioe.org>,
Martin Brown <'''newspam'''@nonad.co.uk> wrote:
> > It first needs your 12 digit online banking code. Think this is the
> > same as my original debit card. Then the 5 digit online banking pass
> > code. Was sent that by post. You can have them remembered.

> It is a very bad idea to allow your PC to remember the password for
> banking.

It isn't my password. It's one they sent to me.

It also needs another I made up.

> >

--
*I don't feel old. I don't feel anything until noon. Then it's time for my nap.

Dave Plowman dave@davenoise.co.uk London SW
To e-mail, change noise into sound.

In article <aeqmnh5f7pq58f7htk3poulrlnubv5bmfl@4ax.com>,
Scott <newsgroups@gefion.myzen.co.uk> wrote:
> >It is a very bad idea to allow your PC to remember the password for banking.

> A thoroughly bad idea. If someone enters your house while your
> computer is on they can steal your money. I think this could be
> regarded as a similar level of negligence to writing the PIN on a
> Post-it note.

Read my post again. My computer doesn't (and can't) remember my actual
password. Would be a pretty crappy banking system that allowed it.

--
*Be nice to your kids. They'll choose your nursing home.

Dave Plowman dave@davenoise.co.uk London SW
To e-mail, change noise into sound.

On 21 Nov 2022 at 15:08:06 GMT, Martin Brown <'''newspam'''@nonad.co.uk>
wrote:

> On 21/11/2022 14:17, Chris B wrote:

>> Also to set up a new payee most banks need some form of 2FA so if you
>> are out with your mobile phone (and your bank card) they would not be
>> able to set up a new payee.
>
> One of the cleverer recent scams involved stealing both and setting up a
> new phone to be the master by using the OTP that flashes up on some
> mobiles by default if the bank's preamble isn't long enough to hide it.
>
> Once they have done that they can look up your bank card PIN using the
> app on the newly registered phone. You & Yours did a piece on it
> recently. There was another good one today too criminals putting fake QR
> codes over the ones on carparks, pub tables and EV charger points that
> redirect to a look alike site and steal your credentials.

These are all excellent reasons for not having a smart phone.

--
“It is not the truth of Marxism that explains the willingness of intellectuals to believe it, but the power that it confers on intellectuals, in their attempts to control the world. And since ... it is futile to reason someone out of a thing that he was not reasoned into, we can conclude that Marxism owes its remarkable power to survive every criticism to the fact that it is not a truth-directed but a power-directed system of thought.”

Sir Roger Scruton

On 21/11/2022 15:15, Tim Streater wrote:
> On 21 Nov 2022 at 15:08:06 GMT, Martin Brown <'''newspam'''@nonad.co.uk>
> wrote:
>
>> On 21/11/2022 14:17, Chris B wrote:
>
>>> Also to set up a new payee most banks need some form of 2FA so if you
>>> are out with your mobile phone (and your bank card) they would not be
>>> able to set up a new payee.
>>
>> One of the cleverer recent scams involved stealing both and setting up a
>> new phone to be the master by using the OTP that flashes up on some
>> mobiles by default if the bank's preamble isn't long enough to hide it.
>>
>> Once they have done that they can look up your bank card PIN using the
>> app on the newly registered phone. You & Yours did a piece on it
>> recently. There was another good one today too criminals putting fake QR
>> codes over the ones on carparks, pub tables and EV charger points that
>> redirect to a look alike site and steal your credentials.
>
> These are all excellent reasons for not having a smart phone.

Only if you are an antediluvian Luddite. A smart phone can be configured
to be safe but unfortunately that is not the default. Ease of use has a
very bad habit of trumping security in most people's eyes.

--
Regards,
Martin Brown

On 21 Nov 2022 at 15:38:55 GMT, Martin Brown <'''newspam'''@nonad.co.uk>
wrote:

> On 21/11/2022 15:15, Tim Streater wrote:
>> On 21 Nov 2022 at 15:08:06 GMT, Martin Brown <'''newspam'''@nonad.co.uk>
>> wrote:
>>
>>> On 21/11/2022 14:17, Chris B wrote:
>>
>>>> Also to set up a new payee most banks need some form of 2FA so if you
>>>> are out with your mobile phone (and your bank card) they would not be
>>>> able to set up a new payee.
>>>
>>> One of the cleverer recent scams involved stealing both and setting up a
>>> new phone to be the master by using the OTP that flashes up on some
>>> mobiles by default if the bank's preamble isn't long enough to hide it.
>>>
>>> Once they have done that they can look up your bank card PIN using the
>>> app on the newly registered phone. You & Yours did a piece on it
>>> recently. There was another good one today too criminals putting fake QR
>>> codes over the ones on carparks, pub tables and EV charger points that
>>> redirect to a look alike site and steal your credentials.
>>
>> These are all excellent reasons for not having a smart phone.
>
> Only if you are an antediluvian Luddite. A smart phone can be configured
> to be safe but unfortunately that is not the default. Ease of use has a
> very bad habit of trumping security in most people's eyes.

How can it be made proof against a fake QR code and associated fake website?

--
What power have you got?
Where did you get it from?
In whose interests do you use it?
To whom are you accountable?
How do we get rid of you?

Tony Benn

On Mon, 21 Nov 2022 15:00:48 +0000 (GMT), "Dave Plowman (News)"
<dave@davenoise.co.uk> wrote:

>In article <jtv129F8bf8U1@mid.individual.net>,
> Andy Burns <usenet@andyburns.uk> wrote:
>> Dave Plowman wrote:
>
>> > It first needs your 12 digit online banking code. Think this is the
>> > same as my original debit card. Then the 5 digit online banking pass
>> > code. Was sent that by post. You can have them remembered.
>> >
>> > So the only thing I have to enter is a (randomly asked for) two digits
>> > from my memorable word. Which in my case isn't a word.
>
>> Presumably you've never registered for smart phone banking, but I
>> thought they sent everyone the "blue calculator" device, without asking?
>
>I have one of those pinsentry devices. But only time I seem to need it is
>when setting up a new payee - previous ones are remembered. I do have the
>Barclay's app on my phone, but only ever used it to pay in a cheque. And
>contactless payments. What I'd call banking I usually do at home on the
>laptop.

I have to use mine for every login to the site. I prefer it that way.

On Mon, 21 Nov 2022 14:17:06 +0000, Chris B <news@salis.co.uk> wrote:

>On 21/11/2022 12:08, Scott wrote:
>
>>>
>>> It is a very bad idea to allow your PC to remember the password for banking.
>>
>> A thoroughly bad idea. If someone enters your house while your
>> computer is on they can steal your money. I think this could be
>> regarded as a similar level of negligence to writing the PIN on a
>> Post-it note.
>
>
>But surely anyone encountering an unattended switched on PC would come
>up against a PIN protected screen lock. This is a trivial inconvenience
>to give a great deal of security. Or are you suggesting that money can
>still be stolen with a screen-locked PC?

I am suggesting that there are people who do not set the PC to lock
after x minutes of inactivity.
>
>Also to set up a new payee most banks need some form of 2FA so if you
>are out with your mobile phone (and your bank card) they would not be
>able to set up a new payee.

With mine the PINsentry device fulfils the role instead (and this is
the topic of the debate).
>
>I would be more worried about hackers/scammers getting at the PC from
>outside the house and interrogating the browser password store.

I don't think this would be viewed as quite the same level of
negligence.

On Mon, 21 Nov 2022 15:08:32 +0000 (GMT), "Dave Plowman (News)"
<dave@davenoise.co.uk> wrote:

>In article <aeqmnh5f7pq58f7htk3poulrlnubv5bmfl@4ax.com>,
> Scott <newsgroups@gefion.myzen.co.uk> wrote:
>> >It is a very bad idea to allow your PC to remember the password for banking.
>
>> A thoroughly bad idea. If someone enters your house while your
>> computer is on they can steal your money. I think this could be
>> regarded as a similar level of negligence to writing the PIN on a
>> Post-it note.
>
>Read my post again. My computer doesn't (and can't) remember my actual
>password. Would be a pretty crappy banking system that allowed it.

Read my post again. I was simply agreeing with Martin, making no
comment on your post. .

On Mon, 21 Nov 2022 13:48:11 +0000 (GMT), charles
<charles@candehope.me.uk> wrote:

>In article <n5qmnht605busbs5906m3nfusg3dhkktsd@4ax.com>,
> Scott <newsgroups@gefion.myzen.co.uk> wrote:
>> On Fri, 18 Nov 2022 17:20:22 +0000, Dave W <davewi11@yahoo.co.uk>
>> wrote:
>
>> >On Thu, 17 Nov 2022 10:35:09 +0000, The Natural Philosopher
>> ><tnp@invalid.invalid> wrote:
>> >
>> >>Has anyone had issues with Barclays online banking. I had to pay a bill
>> >>today, and while I think I managed to, the website is giving error after
>> >>error.
>> >>
>> >>It's the first time I have tried it with the latest Firefox though.
>> >
>> >On a related issue - I don't do online banking but I do use my
>> >Barclays debit card to pay for things online. Recently some of my
>> >payments were not accepted by the bank with no reason given, but I
>> >found I could make a number of payments of £100 until the total
>> >required was reached.
>> >
>> >I went into the bank to ask if they could increase the limit. They
>> >told me that they had recently introduced 2FA for transactions. It
>> >turned out that as I had never banked online they didn't know my email
>> >address or mobile phone number, so I never got any message saying
>> >they'd sent me a link for me to confirm the payment.
>> >
>> >I gave them both items so I'm hoping I can pay my next electricity
>> >bill with one payment. However they sent me a marketing email which I
>> >promptly unsubscribed from.
>
>> I don't think a debit card has a limit. The 'limit' is governed by
>> the available balance of your bank account (taking account of any
>> overdraft facility). I once bought a car with a debit card and this
>> presented no difficulty.
>
>I've done this, too. The first time, a phone call to the bank was needed to
>confirm who I was. That was in the days of real Bank Managers.

I'm pretty sure mine was done using the PIN. They wouldn't let me do
it contactless. It was a posh car costing more than £100 :-)

On 21/11/2022 12:30, Andy Burns wrote:
>
> Scott wrote:
>
>> there's no need to remember the membership number as the site can be
>> set to
>> do this.  I have no problem with this as I don't regard a 'membershp
>> number'
>> as being any more sensitive than an email address
>
> No cookie lives longer than a day in this house ...
>

Same here.

--
Regards
wasbit

In article <61annh17veas2cs884d3fvf1a472v8hl20@4ax.com>,
Scott <newsgroups@gefion.myzen.co.uk> wrote:
> On Mon, 21 Nov 2022 15:00:48 +0000 (GMT), "Dave Plowman (News)"
> <dave@davenoise.co.uk> wrote:

> >In article <jtv129F8bf8U1@mid.individual.net>,
> > Andy Burns <usenet@andyburns.uk> wrote:
> >> Dave Plowman wrote:
> >
> >> > It first needs your 12 digit online banking code. Think this is the
> >> > same as my original debit card. Then the 5 digit online banking pass
> >> > code. Was sent that by post. You can have them remembered.
> >> >
> >> > So the only thing I have to enter is a (randomly asked for) two digits
> >> > from my memorable word. Which in my case isn't a word.
> >
> >> Presumably you've never registered for smart phone banking, but I
> >> thought they sent everyone the "blue calculator" device, without asking?
> >
> >I have one of those pinsentry devices. But only time I seem to need it is
> >when setting up a new payee - previous ones are remembered. I do have the
> >Barclay's app on my phone, but only ever used it to pay in a cheque. And
> >contactless payments. What I'd call banking I usually do at home on the
> >laptop.

> I have to use mine for every login to the site. I prefer it that way.

Fairy nuff. But Barclays give you the choice of three different ways here.

And I'd say my 8 digit pass word very much more difficult to work out than
a 4 digit pin.

--
*Windows will never cease *

Dave Plowman dave@davenoise.co.uk London SW
To e-mail, change noise into sound.

In article <1kannhl97eo2fjti632rclmuk6jd3011v8@4ax.com>,
Scott <newsgroups@gefion.myzen.co.uk> wrote:
> >I've done this, too. The first time, a phone call to the bank was needed to
> >confirm who I was. That was in the days of real Bank Managers.

> I'm pretty sure mine was done using the PIN. They wouldn't let me do
> it contactless. It was a posh car costing more than £100 :-)

No way I'd give out my PIN over the phone for anything.

--
*A 'jiffy' is an actual unit of time for 1/100th of a second.

Dave Plowman dave@davenoise.co.uk London SW
To e-mail, change noise into sound.

On Tue, 22 Nov 2022 14:41:28 +0000 (GMT), "Dave Plowman (News)"
<dave@davenoise.co.uk> wrote:

>In article <61annh17veas2cs884d3fvf1a472v8hl20@4ax.com>,
> Scott <newsgroups@gefion.myzen.co.uk> wrote:
>> On Mon, 21 Nov 2022 15:00:48 +0000 (GMT), "Dave Plowman (News)"
>> <dave@davenoise.co.uk> wrote:
>
>> >In article <jtv129F8bf8U1@mid.individual.net>,
>> > Andy Burns <usenet@andyburns.uk> wrote:
>> >> Dave Plowman wrote:
>> >
>> >> > It first needs your 12 digit online banking code. Think this is the
>> >> > same as my original debit card. Then the 5 digit online banking pass
>> >> > code. Was sent that by post. You can have them remembered.
>> >> >
>> >> > So the only thing I have to enter is a (randomly asked for) two digits
>> >> > from my memorable word. Which in my case isn't a word.
>> >
>> >> Presumably you've never registered for smart phone banking, but I
>> >> thought they sent everyone the "blue calculator" device, without asking?
>> >
>> >I have one of those pinsentry devices. But only time I seem to need it is
>> >when setting up a new payee - previous ones are remembered. I do have the
>> >Barclay's app on my phone, but only ever used it to pay in a cheque. And
>> >contactless payments. What I'd call banking I usually do at home on the
>> >laptop.
>
>> I have to use mine for every login to the site. I prefer it that way.
>
>Fairy nuff. But Barclays give you the choice of three different ways here.
>
>And I'd say my 8 digit pass word very much more difficult to work out than
>a 4 digit pin.

But that's not how it works. The debit card goes into the PINsentry
machine then you enter the four digit PIN and the PINsentry machine
generates a new eight digit code each time.

In article <f5spnh93pgajad7hsfinjcjhnicb3kc6op@4ax.com>,
Scott <newsgroups@gefion.myzen.co.uk> wrote:
> On Tue, 22 Nov 2022 14:41:28 +0000 (GMT), "Dave Plowman (News)"
> <dave@davenoise.co.uk> wrote:

> >In article <61annh17veas2cs884d3fvf1a472v8hl20@4ax.com>,
> > Scott <newsgroups@gefion.myzen.co.uk> wrote:
> >> On Mon, 21 Nov 2022 15:00:48 +0000 (GMT), "Dave Plowman (News)"
> >> <dave@davenoise.co.uk> wrote:
> >
> >> >In article <jtv129F8bf8U1@mid.individual.net>,
> >> > Andy Burns <usenet@andyburns.uk> wrote:
> >> >> Dave Plowman wrote:
> >> >
> >> >> > It first needs your 12 digit online banking code. Think this is
> >> >> > the same as my original debit card. Then the 5 digit online
> >> >> > banking pass code. Was sent that by post. You can have them
> >> >> > remembered.
> >> >> >
> >> >> > So the only thing I have to enter is a (randomly asked for) two
> >> >> > digits from my memorable word. Which in my case isn't a word.
> >> >
> >> >> Presumably you've never registered for smart phone banking, but I
> >> >> thought they sent everyone the "blue calculator" device, without
> >> >> asking?
> >> >
> >> >I have one of those pinsentry devices. But only time I seem to need
> >> >it is when setting up a new payee - previous ones are remembered. I
> >> >do have the Barclay's app on my phone, but only ever used it to pay
> >> >in a cheque. And contactless payments. What I'd call banking I
> >> >usually do at home on the laptop.
> >
> >> I have to use mine for every login to the site. I prefer it that way.
> >
> >Fairy nuff. But Barclays give you the choice of three different ways
> >here.
> >
> >And I'd say my 8 digit pass word very much more difficult to work out
> >than a 4 digit pin.

> But that's not how it works. The debit card goes into the PINsentry
> machine then you enter the four digit PIN and the PINsentry machine
> generates a new eight digit code each time.

And any pinsentry machine works. So if they've found your debit card and
have one, all they have to guess is the PIN.

--
Small asylum seeker wanted as mud flap, must be flexible and willing to travel

Dave Plowman dave@davenoise.co.uk London SW
To e-mail, change noise into sound.

On Tue, 22 Nov 2022 14:43:14 +0000 (GMT), "Dave Plowman (News)"
<dave@davenoise.co.uk> wrote:

>In article <1kannhl97eo2fjti632rclmuk6jd3011v8@4ax.com>,
> Scott <newsgroups@gefion.myzen.co.uk> wrote:
>> >I've done this, too. The first time, a phone call to the bank was needed to
>> >confirm who I was. That was in the days of real Bank Managers.
>
>> I'm pretty sure mine was done using the PIN. They wouldn't let me do
>> it contactless. It was a posh car costing more than £100 :-)
>
>No way I'd give out my PIN over the phone for anything.

It wasn't over the phone. I inserted the card into a card-reader
followed by the PIN. It was the same process as used in a
supermarket, except the sum involved was higher.

My point was that I believe there is no upper limit for a debit card
as long as funds are available in the current account.