DiscoverCard no longer storing Name&Password cookies?

I'm trying to find out why DiscoverCard.com doesn't ask if you want your password saved on your system (i.e., in a cookie). Or, is my system changed somehow. I use Mozilla and it's built in password manager. Some people might use RoboForm or others.

This is also true of a credit union I use. I called to ask about it and their IT person told me I should never store passwords or use automatic fill-in. I tried to explain that I have physical security and I am the only one with access to my machine.

So, I'm guessing that DiscoverCard doesn't trust my security either. Can someone verify this? Thanks.

Reply to
Stubby
Loading thread data ...
«x?u?Oo7Åïüs²Ó@Zrq·¢ê??´·?Kvñ?ÃÕfóéóHEª ?°"v??yC¥®¾?1¿ßä±mç?\~ÿ·uÎjß
Reply to
Margaret Wilson

Stubby wrote in news: snipped-for-privacy@comcast.com:

It's something with the website. Sometimes the button to click for the login to go (after you fill in PWD & USID) does not show. I use Roboform, and when that happens, I just click on the discover login button in Roboform. Roboform starts the login webpage, fills in the data and then, even though the button doesn't show, I do get logged on. The buttons show better in IE. Stupid M$ slaves ... but they do give refunds ...

Reply to
Han

Form auto-fill, as implemented by the Google Toolbar, IE6 and Mozilla/Firefox, does not use cookies. It is purely a browser function.

There's a non-standard "extension" to the HTML specs (introduced by MS in IE, and picked up by other browser makers) that site authors can use to disable this feature if the browser supports said extension. It is ultimately up to the browser and the user whether the auto-fill is used, you've just got to find a way around this in your browser.

Discover and your credit union aren't going to change for you because you have physical security. Rule #1 in web app security is *never trust the client system.*

On the whole, I tend to side with the user and say "hey, however the user has their computer configured, that's up to them", but with the high likelihood of a kiosk or shared PC *not* having this feature turned off (which can be done in IE, fairly easily; haven't bothered looking for it in Mozilla/Firefox but I'm pretty sure it's there too), it's probably better for financial websites to err on the side of safety.

Reply to
Andy Levy

Thanks, Margaret. The novusnet.com site does indeed have the "remember" box. discovercard.com lacks it. I have never understood the relation between the two, but I can log in at either and the latter seems to have remembered my UserID, but not the PW.

Reply to
Stubby

Stubby wrote in news:8c- snipped-for-privacy@comcast.com:

I use Roboform, so it isn't really a problem for logging in, just need to remember. However, in trying to report the problem to Discover, I found out that the consumer services site to send a message also is screwed up - the continue button is missing. Why would they insist on using an inherently slow, cumbersome, prone to misuse browser like IE, I don't know.

Reply to
Han

Are you suggesting that Discover switch their site to support FireFox with its

Reply to
Mike B

"Mike B" wrote in news: snipped-for-privacy@corp.supernews.com:

IMO (not humble) it is an anticompetitive monopolistic move to institute new standards such as the DirectX stuff, which also are invitations (I think) to malicious exploits.

Discover should make their websites accessible by all high security browsers. The appeal of Firefox has been so great that market share has increased in almost no time at all from nothing to ~10%. Some people do indeed like it . Have you tried it?

Reply to
Han

...

I believe my problems started when I installed Mozilla 1.7.8 (over .3). So I think you have pointed me in the right direction. And, "auto-fill" is the right term for what I'm having trouble with. Maybe someone on alt.fan.mozilla can help. Thanks.

Reply to
Stubby

What are you guys talking about? I use Firefox (latest version) and have no problems logging into or using the site, there is a "Login" button (not submit) and "Remember..." flag, which I don't use (I use my own head for saving login information).

Going to the DiscoverCard.com link, there are user/password fields (and a "Login" buttin), but if you look at the top of the screen, there is an "Account Center Log In" link that take you to the link listed above (which is a secure web page).

Reply to
Steve Jenkins

Since I have never had the problem of the missing "Login" button, I suspect the problem is with the Roboform extension you are using (or you are not using the latest version of Firefox).

Reply to
Steve Jenkins

BeanSmart website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.