Slashdot Mirror

If you let others insert scripts into your pages they can steal your visitors.

Maybe it'll make sites think about who they script src from.

One of the bad things I've noticed recently is that HSBC is including objects from third party organisations in their ebanking login pages. I do wonder if any thought has gone into the security of such things, or if HSBC simply don't care (my experience of banks tells me that none of them have a single clue when it comes to internet security).

HSBC launders money for drug kingpins and terrorists.

You should really find a new bank.

If you let others insert scripts into your pages they can steal your visitors.

Maybe it'll make sites think about who they script src from.

One of the bad things I've noticed recently is that HSBC is including objects from third party organisations in their ebanking login pages. I do wonder if any thought has gone into the security of such things, or if HSBC simply don't care (my experience of banks tells me that none of them have a single clue when it comes to internet security).

I was pleasantly surprised a few years ago when I noticed that HSBC support Links for their online banking service (at least in the UK). A quick check confirms they still do.

I wish I could say the same for NatWest and I don't know about other UK banks.

There is a lot to be said for a text-only, script-immune interface. And whilst nobody could say that Links is impervious to attack, it's obviously not going to be on the radar of most cross-site/browser-exploiting evil doers.

Wow sucks to be American, I hadn't imagined how different the situation there could be compared to the UK. I don't really know the American banking system, but I see Flagstar bank offer 4.25% on a certificate of deposit, which looks like a similar product to my fixed rate bond.

Here's a link to HSBC's now reduced offer of 8% interest on a regular savings account (rate is fixed for a year):
http://www.hsbc.co.uk/1/2/personal/savings/regular-saver;jsessionid=0000kUtVF-Zky4M9b6WTzQfIA_j:11j74lc1v

Not just use related. One of the biggest banks in the world, with branches in 60 countries would be on the list: http://www.hsbc.co.uk/1/2/personal/contact

I have just got some fun logged in to Zopa as a "potential" lender. The agreed lending rate is unrealistically low. Lending to the "A" grade borrowers for 6 months gives you only 4.5% AER (annual equivalent rate) and lending to the "B" grade ones will only give you 5.0%. And you are responsible for all the tax.

I would rather lend my money to HSBC. For one of the first standard online saving
account, you can earn 4.75% AER (and it is not even fixed for 6 months).

The interest rate setting mechanism is kind of a double auction market. You, as either lender or borrower, can set your offer rate. The "market" rate is the one when both meeting somewhere in the middle. I mean most lenders are not really serious at this moment. They are likely to throw £10 in order to test how the system work. But, causually, you can see how people evaluate risk. For this type of unsecured loan via a potentially run-away-overnight "bank", my risk premium is way higher than 10%. Even if I trust the whole system, given a default rate of 3% quoted somewhere in their website, a risk-neutral lender will at least demand an interest rate of the "risk-less" rate (the return that you deposit in a reputable regular bank) + the default rate + their annual handling fee, which means at least 4.5+3+0.5=8%.

Luckily jasetheace - who made that comment posts frequently on tons of boards. According to this page this page he works for HSBC - a bank...

Firebird works fine at my little bank too.

The only problems I've had is with websites who think they know best, telling me I *need* internet explorer this, or netscape that, and send me on my way. Of course, using the ol' user agent switcher solves this "problem". Why do they insist on simply blocking the other browsers?

I use the online banking of HSBC all the time, in mozilla and konqueror, with no problems at all. Well recommended.