CitiBank Credit Card-WEB issue

nicoss · 01-11-2007, 08:21 PM

Has anybody experienced this issue accessing their on-line account at Citi Bank?

As of yesterday trying to login using FireFox a new window pops up containing HTML & Java code !!!!

(Before that both FireFox & IE worked fine)

In addition the “new & improved” page does not show the security lock on the lower right corner of the browser.

Renocat · 01-11-2007, 08:42 PM

<div class='quotetop'>QUOTE(nicos @ Jan 11 2007, 08:21 PM) [snapback]374476[/snapback]</div>

Quote:

Has anybody experienced this issue accessing their on-line account at Citi Bank?

As of yesterday trying to login using FireFox a new window pops up containing HTML & Java code !!!!

(Before that both FireFox & IE worked fine)

In addition the “new & improved” page does not show the security lock on the lower right corner of the browser.
[/b]

I just logged into www.citicards.com and entered my username and password and got right to my account. I am using Firefox 1.5.09

nicoss · 01-11-2007, 09:14 PM

Now I'm going nuts.

Went to the Citi site 3 times and the 2nd time got the same HTML, JAVA stuf, the other two no problem.

(Also using FF 1.5.09 and the Bank support says that they do not support FF, only IE; go figure)

This is a screen capture of the rogue code (zipped for size)
[attachmentid=6228]

Trevor · 01-11-2007, 09:42 PM

I had the window of code popup also. I just figured that the survey window popup that appeared when I first launched the site was the culprit. Had no problem getting into the site though. The window of code actually popped up behind other windows so I didn't notice it until I was done.

nicoss · 01-12-2007, 01:16 AM

At least I'm not the only one;

Now my issue is that ANY other bank has the “startup” page as an httpS://..........
(which was also the case with CITI before they launched the new & improved site)
This, by definition, establishes an overall secure connection to the server, not so with the new http://.... format.

I have to admit that I’m a bit paranoid when it comes to security and I might be over alarmed by this.

The one reason for not cancelling the card is that Citi is the only bank offering Virtual account numbers for on-line shopping.

Edited:

Using this link, can bypass the non-secure startup URL:
https://www.accountonline.com/Login?siteId=CB

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Gas Credit Card	Tom6850	Fuel Economy	1	03-20-2007 09:00 PM
New Credit Card Scam	hycamguy07	Fred's House of Pancakes	5	02-10-2007 02:43 PM
Credit Card Grrrrrrr!	pogo	Fred's House of Pancakes	6	02-02-2007 12:03 PM
Anyone use a credit card to purchase their Puius?	koa	Prius Main Forum	15	02-10-2006 09:20 AM
Paying for Prius with a credit card	maggieddd	Prius Main Forum	62	08-08-2005 07:52 PM

01-11-2007, 08:21 PM	#1
nicoss Join Date: Aug 2006 Posts: 304 My Car: Package: Nominated 0 Times in 0 Posts TOTM Awards: 0 Friends: 0	Has anybody experienced this issue accessing their on-line account at Citi Bank? As of yesterday trying to login using FireFox a new window pops up containing HTML & Java code !!!! (Before that both FireFox & IE worked fine) In addition the “new & improved” page does not show the security lock on the lower right corner of the browser.

01-11-2007, 09:42 PM	#4
Trevor Senior Member Join Date: Jul 2004 Location: Staten Island, NY Posts: 316 My Car: Package: Nominated 0 Times in 0 Posts TOTM Awards: 0 Friends: 1	I had the window of code popup also. I just figured that the survey window popup that appeared when I first launched the site was the culprit. Had no problem getting into the site though. The window of code actually popped up behind other windows so I didn't notice it until I was done.

01-12-2007, 01:16 AM	#5
nicoss Join Date: Aug 2006 Posts: 304 My Car: Package: Nominated 0 Times in 0 Posts TOTM Awards: 0 Friends: 0	At least I'm not the only one; Now my issue is that ANY other bank has the “startup” page as an httpS://.......... (which was also the case with CITI before they launched the new & improved site) This, by definition, establishes an overall secure connection to the server, not so with the new http://.... format. I have to admit that I’m a bit paranoid when it comes to security and I might be over alarmed by this. The one reason for not cancelling the card is that Citi is the only bank offering Virtual account numbers for on-line shopping. Edited: Using this link, can bypass the non-secure startup URL: https://www.accountonline.com/Login?siteId=CB