<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" 
      xmlns:thr="http://purl.org/syndication/thread/1.0">
  <link rel="alternate" type="text/html" href="http://ask-leo.com/why_am_i_not_getting_asked_additional_security_questions_when_i_expect_them.html" />
  <link rel="self" type="application/atom+xml" href="http://ask-leo.com/atom.xml" />
  <id>tag:ask-leo.com,2009://3/tag:ask-leo.com,2007://3.3172-</id>
  <updated>2009-11-18T17:50:52Z</updated>
  <title>Comments for Why am I not getting asked additional security questions when I expect them?</title>
  
  <generator uri="http://www.sixapart.com/movabletype/">Movable Type 4.25</generator>

  <entry>
    <id>tag:ask-leo.com,2007://3.3172-comment:30398</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2007://3.3172" type="text/html" href="http://ask-leo.com/why_am_i_not_getting_asked_additional_security_questions_when_i_expect_them.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/why_am_i_not_getting_asked_additional_security_questions_when_i_expect_them.html#c30398" />
    <title>Comment from Ziggie on 2007-10-09</title>
    <author>
      <name>Ziggie</name>
      <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
      <![CDATA[<p>I think there is something else there too, in addition to IP address and browser. </p>

<p>My computer travels back and forth between work and my home network.  The banks never seem to recognize me when I switch networks.  Even though I check the "remember this computer" box.</p>

<p>Why wouldn't the bank assume I'm using two different computers (different IPs, same browser though) and remember both as trusted machines?  Something else that is triggering it (same machine, different network, better ask again) is at work.</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/why_am_i_not_getting_asked_additional_security_questions_when_i_expect_them.html">Why am I not getting asked additional security questions when I expect them?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-10-09T16:37:07Z</published>
  </entry>

  <entry>
    <id>tag:ask-leo.com,2007://3.3172-comment:30397</id>
    <thr:in-reply-to ref="tag:ask-leo.com,2007://3.3172" type="text/html" href="http://ask-leo.com/why_am_i_not_getting_asked_additional_security_questions_when_i_expect_them.html"/>
    <link rel="alternate" type="text/html" href="http://ask-leo.com/why_am_i_not_getting_asked_additional_security_questions_when_i_expect_them.html#c30397" />
    <title>Comment from Ken B on 2007-10-09</title>
    <author>
      <name>Ken B</name>
      <uri>http://unspecified</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://unspecified">
      <![CDATA[<p>My bank uses something called a "SiteKey" as well, but it's for exactly the opposite reason.  It's not for the bank to double-check your identity, but rather for you to verify the bank's identity.  (That is, it's not a phishing site.)</p>

<p>The login page asks only for your user name, and not for the password.  After clicking "log in", you are then given a second page, which shows the "SiteKey" you chose when signing up for online access.  It consists of a picture (which you chose from a list) and a phrase (which you typed in), and asks for your password.  A phishing site would have no way of knowing what picture and phrase are associated with your username on that bank.  (Well, not unless they had some spyware on your system which discovered them when you logged in.  But if they had that much access to your computer, they could simply capture your username and password and wouldn't need the phishing site.)</p>]]>
      <p>A comment on: <a href="http://ask-leo.com/why_am_i_not_getting_asked_additional_security_questions_when_i_expect_them.html">Why am I not getting asked additional security questions when I expect them?</a></p>
      <p>
        <a href="http://ask-leo.com">Tech Questions?</a>
        <a href="http://ask-leo.com">Get Answers!</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> ... by Leo Notenboom<br/>
        <a href="http://newsletter.ask-leo.com">Leo's Answers Newsletter</a> -
        <a href="http://ask-leo.com">Ask Leo!</a> in your inbox every week.
      </p>
      <p style="font-size: smaller">All content <a href="http://ask-leo.com/terms.html#copyright">Copyright &copy; 2007</a>.</p>
    </content>
    <published>2007-10-09T15:00:48Z</published>
  </entry>

</feed>
