So not only do they have the worst restrictions on picking passwords — almost every one of which makes your password less secure — but they don’t bother to implement their own restrictions. Somehow that makes me feel worse.

Hmmm… what do you bet that the idea was “wait! What if we need to tell people their passwords over the phone! We can’t use zeros, what if we read them as O’s? And how are you supposed to pronounce characters like ^ anyway — we need to ban those. And no one wants to have to read out a 13-character password!”

http://www.pbs.org/wgbh/pages/frontline/shows/wallstreet/weill/demise.html

Citigroup is greedy and corrupt, and spreads corruption and evil in its wake.

Just saying.

I just rushed over to change my password, don’t know how much it will help.

FWIW, here are the inane password requirements Citibank forces you to follow:

To create a secure password for your account, follow these quick and simple Password Guidelines:
* Must include a combination of letters and numbers only // ok, so explicitly disallowing other characters — which are no harder to store or hash!!! — makes us less safe
* Must be 6 to 12 characters // setting a top limit of 12 characters — what, 13 characters is too big to store on your server??? — makes us less safe
* Cannot begin with a zero // adding arbitrary rules limits the number of passwords, making us less safe
* Cannot include spaces // a space is just a character — it’s no harder to store or hash — excluding it makes us less safe
* Cannot have more than 2 consecutive characters (for example, 222 or MMM, etc) // adding arbitrary rules limits the number of passwords, making us less safe

DUM DUM DUM

Switched entirely to my credit union. Zero problems since then.

Anyway, I see now it’s supposed to just be credit card information. Since I would never willingly be a Citi customer for anything (my mortgage was transferred to them, out of my control), I feel a little safer.

My local credit union has never been hacked for the secure data of its customers.

Good for you!

Not to mention using a local credit union is what every other patriotic American should be doing if they really want to stop these “too big to fail” bullshit operations from having so much power in Washington, D.C. and keep screwing the rest of us.

I think if more people watched this, they’d understand why choosing a large bank is basically an act against America.

Want to stop financial terrorism against America? Pull your money OUT of them, America.

Yep, confirmed for sony-tier security and service.

Which would be consistent anyway.

There is no reason why a bank should ever read out your password over the phone. In fact, there’s no reason a bank should ever have your plain text password in the first place. Is the one-way hash dead these days?

Any of you out there w/ Citibank accounts, take heed.

I bet the Citibank employee who came up with that policy got a raise.