One of the largest Dutch banks, the Postbank, has acknowledged today that a major component of their online banking system has been insecure for months, and possibly even years. To explain the vulnerability, I’ll first give a short introduction about their authorization system: To log on to your account, you need a login name and […]