DiscoverCard no longer storing Name&Password cookies?

Jun 22, 2005 10 Replies

I'm trying to find out why DiscoverCard.com doesn't ask if you want your password saved on your system (i.e., in a cookie). Or, is my system changed somehow. I use Mozilla and it's built in password manager. Some people might use RoboForm or others.



This is also true of a credit union I use. I called to ask about it and their IT person told me I should never store passwords or use automatic fill-in. I tried to explain that I have physical security and I am the only one with access to my machine.



So, I'm guessing that DiscoverCard doesn't trust my security either. Can someone verify this? Thanks.



«x?u?Oo7Åïüs²Ó@Zrq·¢ê??´·?Kvñ?ÃÕfóéóHEª ?°"v??yC¥®¾?1¿ßä±mç?\~ÿ·uÎjß

Stubby wrote in news: snipped-for-privacy@comcast.com:

It's something with the website. Sometimes the button to click for the login to go (after you fill in PWD & USID) does not show. I use Roboform, and when that happens, I just click on the discover login button in Roboform. Roboform starts the login webpage, fills in the data and then, even though the button doesn't show, I do get logged on. The buttons show better in IE. Stupid M$ slaves ... but they do give refunds ...

Form auto-fill, as implemented by the Google Toolbar, IE6 and Mozilla/Firefox, does not use cookies. It is purely a browser function.

There's a non-standard "extension" to the HTML specs (introduced by MS in IE, and picked up by other browser makers) that site authors can use to disable this feature if the browser supports said extension. It is ultimately up to the browser and the user whether the auto-fill is used, you've just got to find a way around this in your browser.

Discover and your credit union aren't going to change for you because you have physical security. Rule #1 in web app security is *never trust the client system.*

On the whole, I tend to side with the user and say "hey, however the user has their computer configured, that's up to them", but with the high likelihood of a kiosk or shared PC *not* having this feature turned off (which can be done in IE, fairly easily; haven't bothered looking for it in Mozilla/Firefox but I'm pretty sure it's there too), it's probably better for financial websites to err on the side of safety.

Thanks, Margaret. The novusnet.com site does indeed have the "remember" box. discovercard.com lacks it. I have never understood the relation between the two, but I can log in at either and the latter seems to have remembered my UserID, but not the PW.

Stubby wrote in news:8c- snipped-for-privacy@comcast.com:

I use Roboform, so it isn't really a problem for logging in, just need to remember. However, in trying to report the problem to Discover, I found out that the consumer services site to send a message also is screwed up - the continue button is missing. Why would they insist on using an inherently slow, cumbersome, prone to misuse browser like IE, I don't know.

Are you suggesting that Discover switch their site to support FireFox with its

"Mike B" wrote in news: snipped-for-privacy@corp.supernews.com:

IMO (not humble) it is an anticompetitive monopolistic move to institute new standards such as the DirectX stuff, which also are invitations (I think) to malicious exploits.

Discover should make their websites accessible by all high security browsers. The appeal of Firefox has been so great that market share has increased in almost no time at all from nothing to ~10%. Some people do indeed like it . Have you tried it?

...

I believe my problems started when I installed Mozilla 1.7.8 (over .3). So I think you have pointed me in the right direction. And, "auto-fill" is the right term for what I'm having trouble with. Maybe someone on alt.fan.mozilla can help. Thanks.

What are you guys talking about? I use Firefox (latest version) and have no problems logging into or using the site, there is a "Login" button (not submit) and "Remember..." flag, which I don't use (I use my own head for saving login information).

Going to the DiscoverCard.com link, there are user/password fields (and a "Login" buttin), but if you look at the top of the screen, there is an "Account Center Log In" link that take you to the link listed above (which is a secure web page).

Since I have never had the problem of the missing "Login" button, I suspect the problem is with the Roboform extension you are using (or you are not using the latest version of Firefox).

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required