Message-ID:

BOFH excuse #137: User was distributing pornography on server; system seized by FBI.

comp / comp.misc / Website Security: IRD Versus My Bank

Subject: Website Security: IRD Versus My Bank
From: Lawrence D'Oliv
Newsgroups: nz.comp, comp.misc
Organization: A noiseless patient Spider
Date: Tue, 16 Jul 2024 01:14 UTC

Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: ldo@nz.invalid (Lawrence D'Oliveiro)
Newsgroups: nz.comp,comp.misc
Subject: Website Security: IRD Versus My Bank
Date: Tue, 16 Jul 2024 01:14:35 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 17
Message-ID: <v74hhr$un01$7@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Tue, 16 Jul 2024 03:14:36 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="55f74b4ae2f116c131f41dc172ef4daf";
logging-data="1006593"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19gjkqTb+rdAXNdE3lUrr/M"
User-Agent: Pan/0.158 (Avdiivka; )
Cancel-Lock: sha1:5Dj9+VasB7XFZM4rvmBc6035+7g=

View all headers

You’d think that banks and the tax department would have similarly
scrupulous attitudes to online security. But their approach seems to vary
quite a bit.

My bank allows me to middle-click a link to open multiple tabs. This way I
can check on multiple accounts, payment setups etc. And of course right-
click to download statements and other documents.

The IRD does not like me opening multiple windows/tabs when I’m logged
in--it seems to see that as some kind of security violation. Also viewing
documents is complicated somewhat because they insist on using popups,
which my browser blocks. So they show a message saying that displaying the
popup failed, I need to configure my browser to allow popups, which is a
security hole in itself.

Luckily I can usually find a link to download the document for offline
viewing.

Subject	Author
Website Security: IRD Versus My Bank	Lawrence D'Oliveiro