Re: [PEN-TEST] Home-Banking PEN-TESTING

["Gontarczyk, Andrew" <agontarc () AU1 IBM COM>]

I would say that if it is a security flaw with some sort of client software
provided by the bank then they would be liable, as that would be part of
there overall solution. However anything else on the users system from the
OS to the applications is totally out of there jurisdiction and hence not
their problem. Also I am sure that would have a lot of disclaimers and
contract to that effect.
It's similar to a key card. if you lose it or give your pin to someone then
it's your problem not the banks... after all it's your money that can get
stolen not the banks..

my thoughts anyway


Andrew