Hacker News Reader

Comment by catmanjan | Hacker News Reader

This is my bank, what should my next steps be? Change my password/PIN? Withdraw my savings (temporarily)?

Hi catmanjan, you do not need to change your NetBank password. We are patched against the Heart Bleed bug. We are dedicated to ensuring our data and that of our customers is safe and secure. We take matters of security very seriously and our security teams are always up to date with all of the latest security developments so that we can continually strengthen the protections we have in place.

nice :)

You have to wonder if they're actually paying someone to put those messages there. They're just different enough to make one think a human is typing them.

I guess management instructed them to do this.

I would advise against changing banks over this though. Knowing banks, this is not going to be the only one or even remotely the most serious security bug they ignored. And their competition is just not going to be better. The way security works at banks is threefold : (a) screw inattentive customers (b) watch backend systems for transactions like a hawk (c) call the police over every small problem claiming (correctly) that the financial system could fail if they don't track the culprits down for their current problem.

Netbank uses IIS, and therefore does not use OpenSSL. AFAIK the customer facing sites were not impacted by the vulnerability. Other internal systems may have been impacted

Consider switching to a different bank.

Which bank?

I... I... don't know if this is a serious question, or a hilarious joke.

(For those that dont know, the bank's slogan used to be "Which bank? The Commonwealth Bank."

Reply on news.ycombinator.com