Hacker News Reader

ASB Bank in New Zealand allows a maximum of 8 characters for your passwords. Numbers and letters only.

That's right, all that stands between you and your account details is 8 characters.

If someone tries to transfer out over ~$200 then you get a text message on your phone - IF you've enabled that service. So it's not the end of the world, but it's still pretty terrible.

View on HN

Yes, but (like most banks) I dare say they'd lock your account after 3 incorrect attempts, and you'd have to unlock it out-of-band (e.g. calling their call centre).

This is a good point.

And now i'm just waiting for the guy who commented earlier to take his dual 5970s and start brute-forcing ASB internet banking details.

Good thing i'm not with ASB.

Reply on news.ycombinator.com