Login or Sign Up
 
 
 
 
 
 
 
 
 
 
 
 
 
Global Forums > General > "Password pants-off at Lloyds Bank" -- The Register
 
Only members can see photos
Only members can see names and photos
"Password pants-off at Lloyds Bank" -- The Register

Original URL: http://www.theregister.co.uk/2008/08/28/lloyds_passwords/

By John Ozimek

Published Thursday 28th August 2008 12:08 GMT

Set yourself a rude password at Lloyds TSB, and it is just possible that you might find it changed to something politer. That was the experience of Lloyds customer Steve Jetley, who attempted to set "Lloyds is pants" as his telephone banking password.

According to Mr Jetley, this was then changed by a member of staff to "no it's not". A certain amount of toing and froing followed. Mr Jetley played "Barclays is better". The computer said ‘no’. He was informed that the system would only accept single words.

Mr Jetley then tried “censorship”, but again, the computer said ‘no’. Apparently six characters is the system limit.

In fairness to Lloyds, it has since apologised to Mr Jetley, putting this incident down to the actions of a single rogue member of staff. A statement from the bank added: "It is very disappointing that he felt the need to express his upset with our service in this way. Customers can have any password they choose and it is not our policy to allow staff to change the password without the customer's permission. (El Reg exclaims: ANY password?)

"The member of staff involved no longer works for Lloyds TSB."

While all this japery may bring a smile to our readers’ lips, it does raise some quite serious issues. According to Mr Jetley, the first he knew that his security details had been changed was when he was informed that his code word did not match with the one on the computer.

When we spoke to Lloyds about this matter, it was less than reassuring. The system in question was one specific to Business Customers: as far as they were aware, the worst that could happen was that Mr Jetley would have been unable to confirm the balance on his account. There was no possibility that this password could have been used to plunder his hard-earned dosh.

Nonetheless, the consequences for any individual of not being able to access business banking information when they wish to could be serious.

Lloyds also confirmed that individual staff members were not allowed to change passwords – but was not so sure whether this also meant that they were not “able” to do so.

Initially, it believed the latter to be the case, but this story would suggest otherwise. It then suggested – but could not confirm - that the system involved in this particular story was an old one and had since been changed.

In other conversations with Lloyds, Reg readers report they have been told that Lloyds Telephone and Online Banking is based on state-of-the-art security principles. We seriously question this.

Or to put it another way: if a six-character password, visible to all system users, and with an apparently instant over-write facility represents the best in current security, then Vulture Central is investing in a very large mattress, under which it will be storing all its ill-gotten gains in future. ®

The text you are quoting:

Original URL: http://www.theregister.co.uk/2008/08/28/lloyds_passwords/

By John Ozimek

Published Thursday 28th August 2008 12:08 GMT

Set yourself a rude password at Lloyds TSB, and it is just possible that you might find it changed to something politer. That was the experience of Lloyds customer Steve Jetley, who attempted to set "Lloyds is pants" as his telephone banking password.

According to Mr Jetley, this was then changed by a member of staff to "no it's not". A certain amount of toing and froing followed. Mr Jetley played "Barclays is better". The computer said ‘no’. He was informed that the system would only accept single words.

Mr Jetley then tried “censorship”, but again, the computer said ‘no’. Apparently six characters is the system limit.

In fairness to Lloyds, it has since apologised to Mr Jetley, putting this incident down to the actions of a single rogue member of staff. A statement from the bank added: "It is very disappointing that he felt the need to express his upset with our service in this way. Customers can have any password they choose and it is not our policy to allow staff to change the password without the customer's permission. (El Reg exclaims: ANY password?)

"The member of staff involved no longer works for Lloyds TSB."

While all this japery may bring a smile to our readers’ lips, it does raise some quite serious issues. According to Mr Jetley, the first he knew that his security details had been changed was when he was informed that his code word did not match with the one on the computer.

When we spoke to Lloyds about this matter, it was less than reassuring. The system in question was one specific to Business Customers: as far as they were aware, the worst that could happen was that Mr Jetley would have been unable to confirm the balance on his account. There was no possibility that this password could have been used to plunder his hard-earned dosh.

Nonetheless, the consequences for any individual of not being able to access business banking information when they wish to could be serious.

Lloyds also confirmed that individual staff members were not allowed to change passwords – but was not so sure whether this also meant that they were not “able” to do so.

Initially, it believed the latter to be the case, but this story would suggest otherwise. It then suggested – but could not confirm - that the system involved in this particular story was an old one and had since been changed.

In other conversations with Lloyds, Reg readers report they have been told that Lloyds Telephone and Online Banking is based on state-of-the-art security principles. We seriously question this.

Or to put it another way: if a six-character password, visible to all system users, and with an apparently instant over-write facility represents the best in current security, then Vulture Central is investing in a very large mattress, under which it will be storing all its ill-gotten gains in future. ®


TranslatorAug 28, 2008 @ 17:56
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
 
2 Replies | 2725 Views      |  Send to friend
 
Only members can see photos
Only members can see names and photos
Re: "Password pants-off at Lloyds Bank" -- The Register
Post 1
There was a story doing the rounds some years ago in which a man changed his name to "Yorkshire Bank PLC Are Fascist Bastards" and tried to get Yorkshire Bank PLC to print cheque books with that name on them. They closed his account. However I can't find the story since:

1. I can't remember if it was Yorkshire Bank PLC

2. I can't remember if it was Are Fascist Bastards

which kind of makes it hard to Google. But you get the point. Plus:

3. It was probably an urban legend anyway.
The text you are quoting:
There was a story doing the rounds some years ago in which a man changed his name to "Yorkshire Bank PLC Are Fascist Bastards" and tried to get Yorkshire Bank PLC to print cheque books with that name on them. They closed his account. However I can't find the story since:

1. I can't remember if it was Yorkshire Bank PLC

2. I can't remember if it was Are Fascist Bastards

which kind of makes it hard to Google. But you get the point. Plus:

3. It was probably an urban legend anyway.
hayes, Aug 28, 2008 @ 18:25
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
Only members can see photos
Only members can see names and photos
Re: "Password pants-off at Lloyds Bank" -- The Register
Post 2
Or not -- I got it right the first time! Mr. Yorkshire Bank PLC Are Fascist Bastards!



Courtesy of The Daily Telegraph (again, sorry about the paper):



In 1995 Michael Howerd was charged £20 for a £10 overdraft on his bank account at Yorkshire Bank's Horsforth branch. The 30-year-old marketing consultant changed his name by deed poll to "Yorkshire Bank plc are Fascist Bastards", the name the bank had to use on a cheque repaying the residue of his account. More recently, Darryl Workman was so infuriated by Abbey National's decision to charge £5 for handling third party bills that he set up a "Shabby National" web site.
The text you are quoting:
Or not -- I got it right the first time! Mr. Yorkshire Bank PLC Are Fascist Bastards!



Courtesy of The Daily Telegraph (again, sorry about the paper):



In 1995 Michael Howerd was charged £20 for a £10 overdraft on his bank account at Yorkshire Bank's Horsforth branch. The 30-year-old marketing consultant changed his name by deed poll to "Yorkshire Bank plc are Fascist Bastards", the name the bank had to use on a cheque repaying the residue of his account. More recently, Darryl Workman was so infuriated by Abbey National's decision to charge £5 for handling third party bills that he set up a "Shabby National" web site.
hayes, Aug 28, 2008 @ 20:08
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
2 Replies | 2725 Views      |  Send to friend
 
 
 
Feedback Form