Steve's thoughts

10/20/2004

Windows XP SP2 against CSS Stylesheets

Filed under: — site admin @ 10:42 pm

Not that CSS Stylesheets had ever been simple to use - but Windows Spypack2 adds another level of incompatibility: The new security measures prevent CSS opaque effects.

Took me a while to figure it out, but it seems Internet Explorer prevents access to its filters per default.

This was the CSS I was using and that Microsoft seems to consider dangerous:
#opaque {
filter:alpha(opacity=50);
-moz-opacity:.5;
opacity:.5;
}

Time to find a better browser…

10/17/2004

New weblog…lost old thoughts

Filed under: — site admin @ 8:31 am

I finally got fed up with all the comment spam in my weblog - so I updated it to the latest version of Wordpress. The new spam prevention seems pretty good, worst case I will start moderating all comments.

3/9/2004

Online Banking = Security Suicide?

Filed under: — site admin @ 11:29 am

I was just trying to log into my online account at TCF bank. Then I noticed that the Login link no longer leads to a secure site at tcfexpress.com but a rather obscure site at https://secure.mvnt4.com. It looked like TCF’s site, but the paypal and eBay fraud sites look like paypal and eBay… So I checked whois and found that MVNT4.COM is registered to Metavante Corporation, not TCF. A big warning sign! The security certificate for the site is issued to CN = secure.mvnt4.com OU = Corporate Account O = Metavante Corporation L = Milwaukee S = Wisconsin C = US, not TCF. An even bigger warning sign!!!

Now, do I really think that this is a fraudulant website? No, but my evidence is weak: The hostmaster for tcfexpress.com is the same company Metavante. But how can anyone really expect an average online banking customer to act responsibly if online banks count on their customers ignoring every warning sign; if they didn’t TCF would have essentially shut down their online banking!

An online bank that seems to ignore every aspect of online security…brave new world.

Powered by WordPress