"It's ironic," mused Leung. "We used to say: 'online banking, anytime, anywhere, any device'...the idea was that customers could use their PDAs, or computers in cybercafes to do their banking. But now, because of security issues, we say: 'go home, and use your familiar and trusted computer with your second-factor token!"