Nope. They just store your 6-8 character password in plaintext behind their huge... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tomschlick on Nov 24, 2015 \| parent \| context \| favorite \| on: My bank has an API so I built online banking Nope. They just store your 6-8 character password in plaintext behind their huge monolithic Java/.Net/Cobol app.

function_seven on Nov 25, 2015 [–]

They employ a clever 3-step hashing algorithm, though:

    1. Truncate user's password to 8 characters
    2. Uppercase the entire thing
    3. Convert to EBCDIC

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact