Quote:
Originally Posted by jswinden
The banks seem to be very secure. The commerce sites need to hire the same security firms that the banks use!
|
Just because they are not running the vulnerable versions of openssl or openssl at all does not make them secure, much less very secure. They just are not vulnerable to this particular threat.
Banks are notorious for requiring "insecurity questions" that allow crackers pretending to be a customer that has forgotten the account password to get in by knowing or guessing answers to the "insecurity questions".