http://bentasker.i2p/posts/blog/security/732-uk-banking-protecting-you-by-exposing-you-to-risk.html
If someone gets my credentials, then, it doesn't matter whether their tool has built up a "behavioural biometric" of my use or not because it can be prevented from acting: Alice logs into Barclays regularly, and doesn't block anything Alice accidentally leaks her creds (via a phishing page, or whatever) Bob has Alice's creds Bob goes to the Barclays login page, but blocks third party domains Bob logs in and raids Alice's savings The system is supposed to...