Introduction of new security software and the decision to allow customer ID's to be saved in the browser have come under scrutiny by security experts