• ashughes@feddit.uk
    link
    fedilink
    English
    arrow-up
    15
    ·
    8 months ago

    Meanwhile I can’t use the Bank of Scotland app on Graphene OS because apparently GOS isn’t secure enough.

  • TheReturnOfPEB@reddthat.com
    link
    fedilink
    English
    arrow-up
    14
    ·
    8 months ago

    That happened to me with my bank updated their app. Suddenly I could browse and move money in and out of others’ accounts. I had to fail-hold for 45 minutes for someone to tell me don’t worry about it. Literally had to call out the CEO’s “mission accomplished” blogpost and say “yeah no your rollout wasn’t perfect. fix my shit.” because customer services refused to do anything.

    good times in the 21st century.

      • mjr@infosec.pub
        link
        fedilink
        English
        arrow-up
        6
        ·
        8 months ago

        Banks using less secure IT than their customers but having tons of annoying security theatre? Oh, at least 30 years.

  • BigTwerp@feddit.uk
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    1
    ·
    8 months ago

    For those of you wondering if you might have been affected but can’t find out because the article is paywalled: Lloyds, Bank of Scotland and Halifax are the ones affected.

    • Link@rentadrunk.org
      link
      fedilink
      English
      arrow-up
      3
      ·
      8 months ago

      It’s not paywalled but it is behind an obnoxious cookie prompt. You can hide it with most browsers (iOS Safari or UBlock Origin in Firefox are two examples) and access it anyway without consenting to their cookies.

      • BigTwerp@feddit.uk
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        8 months ago

        That’s all very well but 1) I’m reading this using firefox with clean cookies and.ublock origin and the block is still there. And 2) a cookie paywall is a defacto paywall.

    • mjr@infosec.pub
      link
      fedilink
      English
      arrow-up
      2
      ·
      8 months ago

      Yep, because one of your programmers used it to start sniffing glue, it seems!