Forum Overview :: Hacker :: Bank of America and the problem with that

[quote name="The Happiness Engine"]All a bad actor has to do is proxy your request, load the login page with your emu, and then grab the password. Separate: my two-factor work login shows me a "special image" once I type in my username but before I submit my password. That is literally an enumeration attack allowing me to check every possible valid user on the system, but it doesn't matter because usernames are firstname.lastname.[/quote]