DiscoverCard no longer storing Name&Password cookies?


S

Stubby

I'm trying to find out why DiscoverCard.com doesn't ask if you want your
password saved on your system (i.e., in a cookie). Or, is my system
changed somehow. I use Mozilla and it's built in password manager.
Some people might use RoboForm or others.

This is also true of a credit union I use. I called to ask about it and
their IT person told me I should never store passwords or use automatic
fill-in. I tried to explain that I have physical security and I am the
only one with access to my machine.

So, I'm guessing that DiscoverCard doesn't trust my security either.
Can someone verify this? Thanks.
 
Ad

Advertisements

M

Margaret Wilson

Stubby said:
I'm trying to find out why DiscoverCard.com doesn't ask if you want your
password saved on your system (i.e., in a cookie). Or, is my system
changed somehow. I use Mozilla and it's built in password manager. Some
people might use RoboForm or others.

This is also true of a credit union I use. I called to ask about it and
their IT person told me I should never store passwords or use automatic
fill-in. I tried to explain that I have physical security and I am the
only one with access to my machine.

So, I'm guessing that DiscoverCard doesn't trust my security either. Can
someone verify this? Thanks.
I use Password Agent for auto-fill-in. I prefer to use a separate
application that does some encryption rather than letting my browser
remember IDs & passwords. That said, I just went to the Discover log-in
page and see there's a box you can click under the ID & password fields that
will allow you to save your login. Looks like it uses a cookie. So now,
the Discover site doesn't *ask*, but it lets you tell it (via the check
box). Here's where I log in:

https://www.novusnet.com/cardmembersvcs/loginlogout/app/ac_main

Regards,

Margaret
 
H

Han

I'm trying to find out why DiscoverCard.com doesn't ask if you want
your password saved on your system (i.e., in a cookie). Or, is my
system changed somehow. I use Mozilla and it's built in password
manager. Some people might use RoboForm or others.

This is also true of a credit union I use. I called to ask about it
and their IT person told me I should never store passwords or use
automatic fill-in. I tried to explain that I have physical security
and I am the only one with access to my machine.

So, I'm guessing that DiscoverCard doesn't trust my security either.
Can someone verify this? Thanks.
It's something with the website. Sometimes the button to click for the
login to go (after you fill in PWD & USID) does not show. I use
Roboform, and when that happens, I just click on the discover login
button in Roboform. Roboform starts the login webpage, fills in the
data and then, even though the button doesn't show, I do get logged on.
The buttons show better in IE. Stupid M$ slaves ... but they do give
refunds ...
 
A

Andy Levy

I'm trying to find out why DiscoverCard.com doesn't ask if you want your
password saved on your system (i.e., in a cookie). Or, is my system
changed somehow. I use Mozilla and it's built in password manager. Some
people might use RoboForm or others.

This is also true of a credit union I use. I called to ask about it and
their IT person told me I should never store passwords or use automatic
fill-in. I tried to explain that I have physical security and I am the
only one with access to my machine.

So, I'm guessing that DiscoverCard doesn't trust my security either. Can
someone verify this? Thanks.
Form auto-fill, as implemented by the Google Toolbar, IE6 and
Mozilla/Firefox, does not use cookies. It is purely a browser function.

There's a non-standard "extension" to the HTML specs (introduced by MS
in IE, and picked up by other browser makers) that site authors can use
to disable this feature if the browser supports said extension. It is
ultimately up to the browser and the user whether the auto-fill is used,
you've just got to find a way around this in your browser.

Discover and your credit union aren't going to change for you because
you have physical security. Rule #1 in web app security is *never trust
the client system.*

On the whole, I tend to side with the user and say "hey, however the
user has their computer configured, that's up to them", but with the
high likelihood of a kiosk or shared PC *not* having this feature turned
off (which can be done in IE, fairly easily; haven't bothered looking
for it in Mozilla/Firefox but I'm pretty sure it's there too), it's
probably better for financial websites to err on the side of safety.
 
S

Stubby

Margaret said:
I use Password Agent for auto-fill-in. I prefer to use a separate
application that does some encryption rather than letting my browser
remember IDs & passwords. That said, I just went to the Discover log-in
page and see there's a box you can click under the ID & password fields that
will allow you to save your login. Looks like it uses a cookie. So now,
the Discover site doesn't *ask*, but it lets you tell it (via the check
box). Here's where I log in:

https://www.novusnet.com/cardmembersvcs/loginlogout/app/ac_main
Thanks, Margaret. The novusnet.com site does indeed have the
"remember" box. discovercard.com lacks it. I have never understood
the relation between the two, but I can log in at either and the latter
seems to have remembered my UserID, but not the PW.
 
H

Han

This site is broken in that it does not have a submit button in Firefox.
Thanks, Margaret. The novusnet.com site does indeed have the
"remember" box. discovercard.com lacks it. I have never understood
the relation between the two, but I can log in at either and the latter
seems to have remembered my UserID, but not the PW.
I use Roboform, so it isn't really a problem for logging in, just need to
remember. However, in trying to report the problem to Discover, I found
out that the consumer services site to send a message also is screwed up -
the continue button is missing. Why would they insist on using an
inherently slow, cumbersome, prone to misuse browser like IE, I don't know.
 
Ad

Advertisements

M

Mike B

Han said:
This site is broken in that it does not have a submit button in
Firefox.

I use Roboform, so it isn't really a problem for logging in, just
need to remember. However, in trying to report the problem to
Discover, I found out that the consumer services site to send a
message also is screwed up - the continue button is missing. Why
would they insist on using an inherently slow, cumbersome, prone to
misuse browser like IE, I don't know.
Are you suggesting that Discover switch their site to support FireFox with
its <10% market share and cut off the 90+% of the market using Internet
Explorer? That is not exactly market-driven.
 
H

Han

Are you suggesting that Discover switch their site to support FireFox
with its <10% market share and cut off the 90+% of the market using
Internet Explorer? That is not exactly market-driven.
IMO (not humble) it is an anticompetitive monopolistic move to institute
new standards such as the DirectX stuff, which also are invitations (I
think) to malicious exploits.

Discover should make their websites accessible by all high security
browsers. The appeal of Firefox has been so great that market share has
increased in almost no time at all from nothing to ~10%. Some people do
indeed like it <grin>. Have you tried it?
 
S

Stubby

Andy said:
Form auto-fill, as implemented by the Google Toolbar, IE6 and
Mozilla/Firefox, does not use cookies. It is purely a browser function.

There's a non-standard "extension" to the HTML specs (introduced by MS
in IE, and picked up by other browser makers) that site authors can use
to disable this feature if the browser supports said extension. It is
ultimately up to the browser and the user whether the auto-fill is used,
you've just got to find a way around this in your browser.
....

I believe my problems started when I installed Mozilla 1.7.8 (over .3).
So I think you have pointed me in the right direction. And,
"auto-fill" is the right term for what I'm having trouble with.
Maybe someone on alt.fan.mozilla can help. Thanks.
 
S

Steve Jenkins

Mike said:
Are you suggesting that Discover switch their site to support FireFox with
its <10% market share and cut off the 90+% of the market using Internet
Explorer? That is not exactly market-driven.
What are you guys talking about? I use Firefox (latest version) and
have no problems logging into or using the site, there is a "Login"
button (not submit) and "Remember..." flag, which I don't use (I use my
own head for saving login information).

Going to the DiscoverCard.com link, there are user/password fields (and
a "Login" buttin), but if you look at the top of the screen, there is an
"Account Center Log In" link that take you to the link listed above
(which is a secure web page).
 
Ad

Advertisements

S

Steve Jenkins

Han said:
It's something with the website. Sometimes the button to click for the
login to go (after you fill in PWD & USID) does not show. I use
Roboform, and when that happens, I just click on the discover login
button in Roboform. Roboform starts the login webpage, fills in the
data and then, even though the button doesn't show, I do get logged on.
The buttons show better in IE. Stupid M$ slaves ... but they do give
refunds ...
Since I have never had the problem of the missing "Login" button, I
suspect the problem is with the Roboform extension you are using (or you
are not using the latest version of Firefox).
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top