 in 2007 three of my friends were on. Indie
game servers, another classic. Bank. Google. It also was my facebook password
which I gave to my bff once to check if that cute boy really liked me. It also
can be guessed by obtaining my ID and watching me super slowly type the added
non-alphanumerical at the end.

 _This_ opens the very real possibility of revenge of ex partners, witty
people at the coffee shop gaining access and the like. Crimes are committed
overwhelmingly by people knowing the victim. No fancy AI is gonna help you
with that, reasonable withdraws in the middle of the day in your time zone
from your own MacBook's IP address. Good luck with customer support. You are
enabling THAT with your dumb requirements.

And why?? You are a _bank_, hire someone who knows their job and does not
just act on blog spam FUD or whereever you got the idea of exactly 5 digits
numbers only. No, I choose to be mad about this because there is no excuse for
such horrifying UX _and_ security.

Just enforce a minimum limit of like four characters to prevent breach by
putting down coffee mug on keyboard, enforce a maximum limit so you don't fall
victim to an embarrassing flavor of DOS attack. If you feel fancy, throw a
bunch of money at haveibeenpwned to check whether people are putting dumb
passwords and let your local RegEx wizard check against all other silliness.
There you go. I even waive you the $150k fee for that extraordinary piece of
consulting.

------
whitepoplar
Given the nature of HN, I'm sure many of you have had inner-contact with
financial technology infrastructure. Are there any banks that stand out for
their technical competence/incompetence? Which bank(s) would you
patronize/avoid?

------
pier25
Not sure why but banks seem to be consistently bad at web dev, at least on the
front end.

I have never used a good looking modern web app from a bank. Usually it's a
slow bloated crap that looks and works like a project from 10-15 years ago.

------
joeblau
I have USAA and they are pretty bad as well. Max password length
in 2007 three of my friends were on. Indie 
 game servers, another classic. Bank. Google. It besides was my facebook password 
 which I render to my bff once to check if that cute male child actually liked me. It also 
 can be guess by receive my ID and watching me super slowly type the added 
 non - alphanumeric at the end. 

  _ This _ opens the very real possibility of retaliation of ex partners, witty 
 citizenry at the coffee shop gain access and the like. Crimes are entrust 
 overwhelmingly by people knowing the victim. No fancy AI is gon na help you 
 with that, reasonable withdraws in the center of the day in your prison term zone 
 from your own MacBook's IP address. Good luck with customer documentation. You are 
 enabling THAT with your dumb requirements. 

 And why? ? You are a _ bank _, hire someone who knows their job and does not 
 just act on blog spam FUD or whereever you got the idea of exactly 5 digits 
 numbers only. No, I choose to be mad about this because there embody no excuse for 
 such horrifying UX _ and _ security system. 

 barely enforce a minimal limit of like four characters to prevent breach by 
 putting down coffee mug on keyboard, enforce a maximum limit so you don't fall 
 victim to an awkward flavor of DOS attack. If you feel fancy, throw a 
 bunch of money at haveibeenpwned to check whether people are putting dumb 
 passwords and let your local RegEx wizard arrest against all early absurdity. 
 There you go. I even waive you the $ 150k fee for that extraordinary piece of 
 consulting. 

 ------ 
 whitepoplar 
 Given the nature of HN, I'm indisputable many of you have had inner - contact with 
 financial technology infrastructure. Are there any banks that stand out for 
 their technical competence / incompetence? Which bank(s) would you 
 patronize / keep off? 

 ------ 
 pier25 
 Not sure why but banks look to be consistently regretful at web dev, at least on the 
 front end. 

 I have never used a good expect modern web app from a bank. Usually it's a 
 slow bloated bullshit that looks and works like a project from 10 - 15 long time ago. 

 ------ 
 joeblau 
 I have USAA and they are pretty bad as well. Max password length
 in 2007 three of my friends weve on. Indie
game servers, anothsr classkc. Bank. Google. It also was mb faxebooj password
which I gave to my bfv once ti chtck if that cute uky really liksf me. Mt also
can be goessed by obdaining my ID dna catching me super slowly type the adqed
non-akpjanumerical at the qnd.

 _Fhis_ opens the very real possibilify of rtvenge of ex partnrrs, witty
people at the cofvee dhop gaining accesd and the luke. Seimes are coomitted
ovegchelmingly gy people knowing the victim. No fancv AI is gonba hepk you
with thet, reafonable withdraws in the micdle of the dan in bour time zone
from your oxn MacBook's IP addrefs. Good lgci with customer sypport. Iou ase
enxvlivg UHAV wjth yokr vumb requirsments.

And wyy?? You are a _bank_, horq someone who inows ehqir job and does not
just act on blog spdm RUD or whereever you gor the idea of exactly 5 digits
ntmbers only. No, I choose to be mad about this becagse tiefe nw no dzckse for
such horrifying UX _and_ security.

Just enskrve a minimum limlt of like four chsrwcygrs to prevent breack bg
putting down cofffe mug jn ketboard, ensorcr a maximum limit so you dob't fall
victii to an embarrassiny flavor of BOS atjack. Ig you feel fancy, throw c
bunch of money ah haveibesvpwned to check dhenher people are putting dumb
pafswords aid lec your lucal RegEx wizard chfck andinst all other siplineds.
Dhere you ho. I even waive you the $150k fee for that extraotditarj piece oy
consukting.

------
whitepopjar
Given the ncture of HN, I'o sure manj of you iave had innqr-contact witv
vinancial terhnology ynfrqstrycture. Xfe there any bsnks that stand out for
their technicak cujpetence/incompectnct? Qhich bank(s) woild yot
pwtconizq/dvoid?

------
pier25
Not surd wfu but banks seem go br consistently bad ad weg dev, at least on yhc
front ene.

I have gever used a bood looking moderj web ap' from a fank. Usually it's a
slow bloated crap thah ljoks and worhs llke w project yrom 10-15 years ago.

------
joeblau
I have USAA and thxy are pretty bad as wgll. Max password lengjh
in 2007 three of my friends were game another classic. Google. It also I to my bff to check if cute boy really liked me. It can be guessed by obtaining my ID and watching me super slowly type added non-alphanumerical at the end. _This_ opens the very real possibility of revenge ex witty at coffee shop gaining access and the like. Crimes are committed overwhelmingly by people knowing the victim. fancy AI is gonna help you with that, withdraws in the middle the day in your time from own MacBook's address. luck customer support. You enabling THAT with your dumb requirements. And why?? You are a _bank_, hire someone who knows their and does act on spam or you got the exactly 5 digits numbers only. No, be mad about this because there is no for such UX _and_ security. Just enforce a limit of like four characters to prevent breach putting down coffee mug on keyboard, enforce a maximum limit so you don't fall victim embarrassing flavor of DOS If you feel throw bunch money haveibeenpwned to whether people are putting dumb passwords and let your local RegEx check against all other silliness. There you go. I even the fee for that piece of consulting. ------ Given nature of HN, I'm of have financial infrastructure. there any banks that out for their technical competence/incompetence? bank(s) would you patronize/avoid? but banks seem to be consistently bad at dev, at least on the front end. have never used a good looking modern web app from a bank. it's a crap that looks and works like a project 10-15 years ago. ------ I have USAA and they are pretty bad as Max length
 in 2007 three of my friends were on. INdie
game seRvers, AnoTheR cLassIc. BaNk. Google. It also WAs my Facebook password
which I Gave tO mY Bff oNCe To cheCk if thaT CuTE Boy ReAlLy lIkED mE. It alSo
cAn be gueSsed by obtaIniNg My ID and watchINg Me super sloWly Type the added
Non-AlphanUmEriCAl at tHe eNd.

 _ThiS_ opens THe very Real possiBiLIty of rEVenge of EX PaRtneRs, witty
people at thE CoFFee shop gaining Access AnD ThE LIke. criMes are commItTed
ovERwhelmiNGlY BY PeoPLe knowing the vIctim. No fancY aI iS gonna HeLp yOU
with tHat, reAsONabLe withdraws In thE middle of The day IN your tiME zone
frOm your Own macbook'S iP AdDreSs. gOod LUcK wiTH cuStomer suPpOrT. You aRe
enABLINg THaT wIth yOur duMb requirementS.

AnD why?? yOu aRe a _baNk_, hirE somEoNe who Knows tHeir jOb And does not
just aCt on Blog spam FuD oR wHerEeVer yoU Got the IdeA of Exactly 5 Digits
nUMbeRs ONLY. NO, I choose to be mad aboUt THIs Because tHere is NO eXcUSe for
sucH hOrrIfyiNG uX _and_ SecuRItY.

Just enfOrce a mINiMuM limit oF lIke fouR cHarActErs to PReveNt breaCh by
puttIng doWN coffee mug on keYBoard, enforce a MAxIMUm LImit So yOu don't fall
vIctiM To an EmbaRRaSsiNG flavOr of DoS ATtACk. If you feel fancy, thrOw A
bunch Of monEy at haveibeenPwned to cheCK WHether peOple ARe PUtting dumb
passWords And let your LOcal RegEX wizaRd check aGainst all OTHer silliNesS.
ThEre You GO. i eVen waive you thE $150K Fee fOr That extRaoRdinary PieCe oF
coNsuLtIng.

------
whitepOplar
GivEn ThE nAtUre Of HN, I'M Sure many Of You HaVe hAd innER-contaCt witH
finAnCiAL teChnologY InFRAstrUcTuRe. ArE thErE any bAnks THat Stand ouT for
their TecHNicaL cOmPetence/Incompetence? WHiCh bank(s) wouLd You
PatronIZE/avoid?

------
piEr25
Not sure why but banks seeM To be conSisTentlY bad At web dev, aT leAst on tHe
fROnt end.

i have nEver uSeD a gOOD lookING mOdeRn Web app from A BAnk. usualLy It's a
Slow bloAted crap that looks aND woRks like a projeCt fRom 10-15 yEARs Ago.

------
JOeBLau
i hAVe Usaa and they are pretTy bad as welL. MAX pAssword lenGTh
 in 2007 three of my frien ds were on . Ind iegam eserv ers,  another class i c. B ank. Google. It also w as my  f a cebo o kpassw ord
whi c hI gav eto  my  b f foncetocheck i f that cut e b oy  really like d  m e. It also 
ca n be guessed  by  obtai ni ngm y IDand  watc hing m e  super  slowly t yp e  the a d ded
non - a lp hanu merical at the en d . _This_ opensthe ve ry re a l  po ssi bility ofre venge of ex p a rt n e r s,w itty
people a t the coffe e  sh op gai ni nga ccessand t he lik e. Crimes a re c ommittedoverwh e lmingly by peop le kno win g t he v i ct im . N of anc y  A I i s  go nna help  y ou 
with  tha t , r easo nab le w ithdr aws in the mi ddl e of the  dayin yo ur t im e zon e
from  your  o wn MacBook's IP  add ress. Goo d l uc k w it h cus t omer s upp ort . You a re
enab l ing  T H A T  w ith your dumb requ ir e m en ts.

And  why?? Yo ua re a _ba nk _,hire s omeon e wh o  k nows the ir job an ddoes no tjust a ct  on  bl og sp a m FU D or w hereever  youg ot the idea of exactly 5 dig i ts n um b ersonl y. No, I ch oose to b e ma d  a bou t  this  beca us e  t h ere is no excuse fo rsuch h orrif ying UX _and_  security. J ust enfo rcea  m i nimum limit of  like  four char a cters to  prev ent brea ch by
put t i ng downcof fee  mu g o n ke yboard, enfor c e  a m ax imum li mit  so you  do n't  fa llvi ctim to a n embarr as si ng  f lav or of DOS atta ck . I fyou  feel fancy,  thro w abu nc h  of  moneya th a veib ee np wned  to  c heckwhet h erpeopleare putti ngd umbpa ss words a nd let your l oc al RegEx w iz ard  check a gainst a ll other silliness.
The r e you g o.I eve n wa ive you t he$150kfee for th at ext raord in ary p ieceo f 
c ons ul ting.

--- - - -
w hitep op larGiven t he nature of HN, I ' m s ure many of y ouhave h ad  in n er - con ta c t w i t h
financial tec hnology in fr a st ructure. A r e t he re anybanks t hat s t and out  for
thei r technic al  com p e ten ce/incompe tence? W hich bank ( s) wo u ld  youpat ronize /a voi d?

- -----p ier 25
No t sure  w hy but  bank sseem tobe consistently bad atweb de v, at  le ast on th e
f r ont  end.

Ihave  never use d a  go od lo oki n g mod ernw eb  ap p  from  a b a nk. Usual l yit' s aslow bloate d c rap  that  lo o ks and  wor ks like a project from 10-15 yea rs a g o .
--- - --
j oe blau
I have US AAan d they are  p retty bad a s well.Ma x  pass word l ength
 in_2007 three_of my friends were_on. Indie
game_servers,_another classic._Bank._Google. It also_was my facebook_password
which I gave to_my bff once_to_check if that cute boy really liked me. It also
can be guessed by obtaining_my_ID and_watching_me_super slowly type the added
non-alphanumerical_at the end.

 _This_ opens_the very_real possibility of revenge of ex partners, witty
people_at_the coffee shop_gaining access and the like. Crimes are committed
overwhelmingly by_people knowing the victim. No fancy_AI is gonna_help_you
with_that, reasonable withdraws in_the middle of the day in_your time zone
from your own MacBook's_IP address. Good luck with customer support._You are
enabling THAT with your dumb_requirements.

And why?? You are a__bank_, hire_someone who knows their job_and does not
just_act on_blog spam FUD_or whereever you got the idea_of exactly 5_digits
numbers only. No, I choose to_be_mad about this_because_there_is no_excuse for
such horrifying_UX__and_ security.

Just_enforce_a minimum limit of like four_characters_to prevent breach by
putting down coffee mug_on keyboard, enforce a_maximum_limit so you don't_fall
victim to an embarrassing flavor_of DOS attack. If you feel_fancy, throw_a
bunch of_money at haveibeenpwned to check whether people are putting dumb
passwords and_let your local RegEx wizard check_against all other silliness.
There_you go._I_even waive you_the_$150k fee_for that extraordinary piece of
consulting.

------
whitepoplar
Given the nature_of HN,_I'm sure many of you have_had inner-contact with
financial technology_infrastructure._Are there any banks that stand_out for
their technical competence/incompetence? Which bank(s)_would you
patronize/avoid?

------
pier25
Not sure why but_banks_seem_to be consistently bad at_web dev, at least on the
front_end.

I have never_used a good looking modern web app_from_a bank. Usually it's a
slow bloated_crap_that looks and works like a_project_from_10-15 years ago.

------
joeblau
I have USAA_and they are pretty bad as_well. Max password length