When you’re in a Bank of America online banking session, if your session goes idle for too long, the site pops up an alert box letting you know that your session has timed out due to inactivity. The alert box then redirects to a page which destroys your session and presents a login. This scheme can be easily defeated by immediately refreshing the page after dismissing the alert box, before the redirect occurs… thanks, BOA.