Invalid banking cert spooks only one user in 300
Up to 300 BankDirect customers were presented with a security alert when they visited the bank's website earlier this month — and all but one dismissed the warning and carried on with their banking.
The bank's logs show about 300 customers used the single affected server during the 11-hour period when the certificate was out of date and only one backed out of the page, says Clayton Wakefield, head of technology for BankDirect owner ASB.
By Stephen Bell at Computerworld.
[ Read more ]