Originally Posted by Why

that feature is totally worthless and here is why...

i create a scam site and i get your username... so then i login with it.

then i see your secret image, and possibly your questions... so then i make a new scam site that re-creates both new security steps..

you come to my scam site again, and give me your secret answers, etc.

then i can go and login to your real account and steal everything inside....

sorry but that security feature is used by bank of america and its completely and utterly worthless, just makes stealing from you a bit harder, but if your stupid enough to not look for https connections and proper domains, this wont save you.

anyone with a nice bank account in switzerland or the likes will know what proper online banking security is like.