Re: Code Review for Critical Application e.g Internet banking

[mike () sharecube com]

Clicking on a randomized arrangement of letters on a Web page to enter a password provides almost no security benefit. 
Any Win32 malware can insert itself into a web page and use Javascript to detect where the mouse is clicked or what key 
values are stored. 

Mike

-------------------------------------------------------------------------
Sponsored by: Watchfire

AppScan 6.5 is now available! New features for Web Services Testing, 
Advanced Automated Capabilities for Penetration Testers, PCI Compliance 
Reporting, Token Analysis, Authentication testing, Automated JavaScript 
execution and much more. 
Download a Free Trial of AppScan today!

https://www.watchfire.com/securearea/appscancamp.aspx?id=70150000000CYkc
-------------------------------------------------------------------------