About
Subscribe

Standard denies online banking problems

Martin Czernowalow
By Martin Czernowalow, Contributor.
Johannesburg, 11 Nov 2005

Standard has denied rumours that its recently implemented online features are causing compatibility problems for users running older operating systems.

Director of IT security Louis Lehmann was responding to concerns that the bank's newly introduced "one-time password" for online banking clients does not support Windows 98.

"The security features that were recently deployed are compatible with Internet browsers and have nothing to do with the type of operating system that is being run," Lehmann said.

He also reacted to claims that Standard Bank's online banking clients could be vulnerable to "man-in-the-middle" attacks, where an attacker - either network/firewall administrator or Internet service provider - can reportedly easily access an account once a user logs on.

Standard Bank's Internet banking service has changed to use secure cookies, which has resolved the problem, Lehmann explained.

However, he said, even before this, the "man-in-the-middle" vulnerability was a low-risk threat.

Share