On Mon, 24 Dec 2007 15:12:44 -0000, "tim....."
wrote:
>
>"Jim Ley" wrote in message
>news:476e2faf.74055953@news.individual.net...
>> On Sun, 23 Dec 2007 08:06:10 +0000, d4g4h4@yahoo.co.uk (David Horne,
>> _the_ chancellor (*)) wrote:
>>
>>>Jim Ley wrote:
>>>> ... but actually you wouldn't need all that stuff, just need you to
>>>> log in once, then have the thing they installed on your computer
>>>> transfer the cash somewhere within that log-in session.
>>>
>>>That would be impossible, as the only way I can transfer cash to a new
>>>account is to use the piece of hardware the bank sent me _with_ my card
>>>to generate a code number. Each new bank account requires a new code
>>>number.
>>
>> So the browser plugin software just needs to wait until you're setting
>> up one of these, and switch it to their account...
>
>Only if they can make the switch in the few seconds between being asking for
>the pin number and typing it in. Even then, the Bank's software would have
>to be a bit dumb not to lock up on the initial now-incomplete transaction.
The bank would see no "incomplete" transaction, they'd only see the
fake one coming from the browser.
Jim. |