Tuesday, April 22

HSBC Password Easyfier

The security key mechanism employed by banks like HSBC are incredibly annoying. It may help protect against key loggers, but are not worth it for those with relatively secure home computers.

Luckily, they are quite easy to defeat.
The HSBC field is a simple HTML password field, and the only thing protecting against typing in your security key is that a function fires to stop you on easy keyDown event on the field.

Thanks to greasemonkey, I've written a simple script which replaces the default keyDown function with one that does nothing, allowing you to treat the field as you would a normal password field.

Install for Greasemonkey


function init() {
var oldPassInput = document.getElementById("password");
if(undefined != oldPassInput){
oldPassInput.setAttribute("onkeydown", function(e){})
}
}

window.addEventListener('load', init, false);

1 comment:

iRicardo said...

Pretty Sleek - Misha