Neteller Security ID

[padanian]

I just wanted to ask for your advice.
I just made a second deposit in a casino that I will not specify.
I selected Neteller: usually its quite common that you find your account number saved, and thats fine.
In this case I also found my security id number and this is definitely bizarre since its something that should prevent a possible abusive use of the account.
Did something like this happen to anyone?
Do you think I should get in touch with the casino concerning this issue?

 

[cipher]

I just wanted to ask for your advice.
I just made a second deposit in a casino that I will not specify.
I selected Neteller: usually its quite common that you find your account number saved, and thats fine.
In this case I also found my security id number and this is definitely bizarre since its something that should prevent a possible abusive use of the account.
Did something like this happen to anyone?
Do you think I should get in touch with the casino concerning this issue?

Hi Padanian:

I'd definitely get in touch with that casino and if the matter is not resolved to your satisfaction it wouldn't be a bad idea to take a screen shot and then get in touch with Neteller.

Chances are if this is happening to you it's happening to anyone else who uses Neteller at that casino and that's a scary proposition. Have a good one.

 

[padanian]

Hi Padanian:

I'd definitely get in touch with that casino and if the matter is not resolved to your satisfaction it wouldn't be a bad idea to take a screen shot and then get in touch with Neteller.

Chances are if this is happening to you it's happening to anyone else who uses Neteller at that casino and that's a scarry proposition. Have a good one.

Thanks Cipher. As usual, a great feedback!
Will do it, and keep the forum informed.

 

[Lukas85]

is it a NetEnterntainment casino?

 

[sw2003]

Casinos' security is primarily for their own safety! See how they check and double check the payout?

Do they care about our security? Not really! I have seen casinos that put up sign-up page that asked you to give a login id, password and then the whole webpage isn't even encrypted. So basically your id and password are opened to anyone that wants to look.

When you talk to their stupid CS, they first insist everything is encrypted and when you point out that your browser shows that there is no encryption, .... they still insist there is encryption .... for a while ...... and then switch to nobody yet has any problem ....... ... and then every casino does the same thing ..... it is common at all the casinos .... blah blah ..........! So you see, the casinos don't care about our security, only their own!


:icon_evil

 

[padanian]

e-mail to casino

Hello there!
I opened an account with xx some weeks ago.
I noticed that when I deposit using Neteller, also the space for the ID Security Code is already filled (and not just the neteller account number as it usually happens).
I think this represents a danger for players since the identification code should be intended as a security pin in order to prevent possible abuses.
I would be glad to have a feedback from you concerning this issue.
In the meantime I take this chance to send my
Kind Regards
Aldo xxxxx

PS: The first thing I do when using a computer is disabling any auto-fill option, especially when my wife has acces to it.... So that wouldn't be an explanation

 

[zaphod42]

NETeller's security IS a little too lax

I find it rather disconcerting that NETeller's web site allows the browser
to remember the secure ID. This should be considered a secure field that the browser does not automatically remember from previoius sessions.

Yet in any browser I've ever used, the NETeller website login screen already knows both my account number AND my secure ID. Not very comforting.
And no, this is not some setting on my browser I've screwed up. I'm well versed with the browsers I use, and this is the ONLY "secure" site that does this to me.

Sure the password field is still secure (ie; doesn't allow auto-fill from the browsers history), but shouldn't the secure ID be treated the same way?

 

[caruso]

I find it rather disconcerting that NETeller's web site allows the browser to remember the secure ID...Yet in any browser I've ever used, the NETeller website login screen already knows both my account number AND my secure ID.

Mine doesn't. I would rather it did - in the old (FAR superior) format, it did. I find the login page very irksome; the cursor somehow vanishes from the secure ID field as I'm typing the wretched thing, every time. The password field usually behaves exactly the same.

I wish they'd left their website alone. There was no need of these constant updates, and NONE are for the better. The old format was excellent. Change for change's sake is pointless.

 

[sw2003]

I find it rather disconcerting that NETeller's web site allows the browser
to remember the secure ID. This should be considered a secure field that the browser does not automatically remember from previoius sessions.

Yet in any browser I've ever used, the NETeller website login screen already knows both my account number AND my secure ID. Not very comforting.
And no, this is not some setting on my browser I've screwed up. I'm well versed with the browsers I use, and this is the ONLY "secure" site that does this to me.

Sure the password field is still secure (ie; doesn't allow auto-fill from the browsers history), but shouldn't the secure ID be treated the same way?

What browser are you using?

 

[zaphod42]

I use both IE v6 and Mozilla FireFox...

I DO have the "auto-fill" option turned on, but it shouldn't be remembering secure / password fields unless I specifically tell it to (and naturally I would never tell it to do so on sensitive sites like NETeller or other financial and/or private stuff.) Furthermore, no other sites do this to me (paypal, or any of my bank accounts, investment accounts, etc...)

This tells me that the code behind the NETeller login page doesn't have the Secure ID field set as a "password" type field, ie; one which won't be remembered unless explicitly requested by the user.

 

[GrandMaster]

My concern about Neteller is that when I make a Neteller deposit at a Boss Media casino using Webdollar, it opens a browser window with a URL containing both my account number and secure ID, which is then stored in the browser history, available to anyone else using the computer.

 

[padanian]

My concern about Neteller is that when I make a Neteller deposit at a Boss Media casino using Webdollar, it opens a browser window with a URL containing both my account number and secure ID, which is then stored in the browser history, available to anyone else using the computer.

So I see mine was not the only case.
The casino replied that they consider it an extra service for the player. I'm not very convinced...Sure they don't do it on purpose, but it's a serious breach of security. As advised by Lanidar I'll contact his friend at Neteller.

 

[sw2003]

So I see mine was not the only case.
The casino replied that they consider it an extra service for the player. I'm not very convinced...Sure they don't do it on purpose, but it's a serious breach of security. As advised by Lanidar I'll contact his friend at Neteller.

Go ahead, what are you waiting for?

 

[padanian]

Go ahead, what are you waiting for?

Living in Ireland, I'm becoming fast and efficient like the locals.
Please have a look!!!

Old / Expired Link

 

[padanian]

Everything seems to be ok now. The following is an extract the mail I received from the casino and it's quite satisfactory. I can now say that it is Global Player, and their costumer care was very good (and not just because they gave me a bonus...).

Dear Mr. xxxxx,

In the meantime our security department informed me, that they have
removed the auto-fill. Our intention was to make it easy for our
customers as you only can access the webcashier with your GPC account
data, but of course security comes first.

Also kindly note that your GPC PIN code has changed to 'xxxxxxx'. Please
use this one in the future to log into your GPC account.

We have credited your account with a 'thank you for the suggestion'
bonus and hope, that you will feel more comfortable with the new procedure.

With kind regards,

xxxxxxx xxxxxxxxx
--
Global Player


Thanks to Lanidar and Cipher for the kind advice. We can just learn from more experienced players.
Last but not least, do not miss the chance to check the link of my post above...

 

[cipher]

Everything seems to be ok now. The following is an extract the mail I received from the casino and it's quite satisfactory. I can now say that it is Global Player, and their costumer care was very good (and not just because they gave me a bonus...).

Dear Mr. xxxxx,

In the meantime our security department informed me, that they have
removed the auto-fill. Our intention was to make it easy for our
customers as you only can access the webcashier with your GPC account
data, but of course security comes first.

Also kindly note that your GPC PIN code has changed to 'xxxxxxx'. Please
use this one in the future to log into your GPC account.

We have credited your account with a 'thank you for the suggestion'
bonus and hope, that you will feel more comfortable with the new procedure.

With kind regards,

xxxxxxx xxxxxxxxx
--
Global Player


Thanks to Lanidar and Cipher for the kind advice. We can just learn from more experienced players.
Last but not least, do not miss the chance to check the link of my post above...

Hi Padanian:

Glad to hear everything worked out well for you. The pictures were priceless. No one could have ever told that story better than those pics. Have a good one. Have a good one.

 

[gambler888]

Neteller Security Flaw???

Is it true that if you use Neteller to deposit to any Neteller enabled Casino that by default you are giving that Casino Mechant, or at least some individuals at the Casino Merchant, the ability at any time take money out of your Neteller account. From what I have heard a merchant has all the account information required to do so, without a player being aware.

I have not heard of a specific case of this being done, but I'd be careful.