Barclays bank has suffered another embarrassing incident, calling the security of its online banking service into question yet again.
vnunet.com, 11 Aug 2000
Barclays bank has suffered another embarrassing incident, calling the security of its online banking service into question yet again.
Customers of the high street giant could have been leaving their accounts open to abuse because of a security flaw in Barclays' online banking system.
According to the bank, after logging out of the online service, an account can be immediately reaccessed using the 'back' button on a web browser. If a customer accessed their Barclays account on a public terminal, the next user could use this method to view the banking details.
Many other online bank services, including LloydsTSB, NatWest and Smile, ask a user to re-enter their passwords if they try to reaccess the service after logging out.
A Barclays spokeswoman told vnunet.com: "This is not just a Barclays thing, it happens with Hotmail too. We are aware of this, but when customers join the online banking service they are given a booklet and we tell customers to clear the cache to prevent this from happening.
"We take our responsibilities very seriously, and if this means we have to make more changes then we will."
Matt Tomlinson, business development director at IT security consultancy MIS, said: "This really is bad practice. Barclays have given the responsibility for security to the end user. They tell customers in their booklet to clear their cache, but not everyone would know what this means. Do they want to have a generation of people with a high IT knowledge, or do they want it to be accessible to all."
Tomlinson said it would be "very simple" for Barclays to correct the problem. NatWest's online banking service and LloydsTSB have settings that do not allow customers to get back into their online accounts, he said. "It's their responsibility - 100 per cent," he added.
Barclays recently suffered a breach following a system upgrade that allowed customers to view each other's bank account details online.
To clear your cache: For Internet Explorer go to Tools, internet options, advanced, scroll down to security and tick the box that says 'do not save encrypted pages to disk'.
For Netscape Navigator go to Edit, Preferences, Advanced, Cache and click 'clear memory cache' and 'clear disk cache'.
Back-office staff at Lloyds TSB had to work frantically this afternoon to smooth out glitches with its internet banking service after a connectivity problem left customers unable to access their accounts.
BT's free web-based email service talk21 has come under fire for lax security after an online businessman stumbled across a flaw that gave him access to users' email accounts.
We take a closer look at business portal Clearlybusiness.com, which aims to provide small businesses with essential information and back-office resources.
One in three supposedly secure ebusiness servers are using software with known security weaknesses, and European sites are the worst offenders, according to a survey.
First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1
NetGear's four-bay compact network-attached storage gets a serious speed boost
Do you agree?
Have your say on this article