Remove ING DIRECT Security Through Obscurity

By Matthew Flaschen Last update Oct 7, 2008 — Installed 569 times.

Script Summary: Simplifies needlessly complex ING login form, allowing one to, gasp, actually type their pin into a secure form.



This script removes the keypad on the ING Direct login screen and allows one to enter his or her pin directly into a PIN textbox. The keypad is meant to prevent logging, but is actually useless because the letter images use the letter they depict as a filename. Thus, a logging mechanism could easily parse out the letter-number association. This script uses the same type of parsing, but to allow direct number entry.