I should never use bookmarks, because they are a security risk?

[Mangetout]

Agreed. It seems pretty unlikely - I think I was just grasping for some kind of sensible meaning behind the bank’s admonition against bookmarks. In reality (and given the other information in the OP), the more likely explanation for their warning about bookmarks is that they are just incompetent.

[Napier]

@Stranger_On_A_Train

I’m guessing passwords were stored in a plaintext lookup table embedded in the login page static HTML file that was copied over from the previous GeoCities host. They hid it by overlaying a GIF with the bank’s mascot, which somewhat presciently is is a blind shepherd guiding his flock toward a pack of wolves. ‘Hackers’ discovered it when someone tried to update the page to HTML5 and displayed the page on an Android phone.

Nah, I’m thinking one of the cleaning temps found the IT department’s keyboard one night and just peeked under it.

[Stranger_On_A_Train]

This is why you always write your passwords in a box on your whiteboard with “DON’T ERASE!!!” written in big red letters.

Stranger

[Stranger_On_A_Train]

Security Experts Advise Americans To Not Click Anything

Stranger