Re: Bank Of America - sign on process - how is this secure?

From: Henrick Hellström (henrick.hellstrm@telia.com)
Date: 11/27/02 

From: Henrick Hellström <henrick.hellstrm@telia.com>
Date: Wed, 27 Nov 2002 17:20:01 GMT

Barry Margolin wrote:
> If your identity is stolen as a result of this, I expect you'd have a hard
> time proving that it was done during a transaction with this bank. So even
> if they were liable, they could probably avoid a significant judgement
> against them.

Not necessarily. I suppose you and the bank would have an equal burden
of proof; at least that would be the case in most jurisdictions I know
of. It would be sufficient that there is no evidence that your password
got stolen any other way (e.g. the contested withdrawal was made from
the same IP you had logged in from five minutes earlier, etc).