0

iTWire - Bendigo Bank changing authentication method from token to mobile app

 4 weeks ago
source link: https://itwire.com/opinion-and-analysis-sp-481/open-sauce/bendigo-bank-changing-authentication-method-from-token-to-mobile-app.html
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

Thursday, 28 March 2024 10:26

Bendigo Bank changing authentication method from token to mobile app Featured

By Sam Varghese

Bendigo Bank changing authentication method from token to mobile app

Image by Mohamed Hassan from Pixabay

Bendigo Bank is changing the way it offers online authentication to its customers, switching from a code generated on a physical security device to a mobile app.

A bank spokesperson told iTWire, in response to a query, that the change was being made in order to "ensure that all our customers have the highest level of security when it comes to e-banking".

"e-banking security for all our customers is being upgraded as we replace traditional security tokens with modern multi-factor authentication (MFA) technology," the spokesperson added.

The spokesperson ignored these additional queries:

"Is this shift driven by the bank's desire to harvest the details of its users?

"Has the risk of MITM [man in the middle] attacks been factored in when deciding the move?

"In what respects does the current 2FA token lack when compared to the app?"

The first query was prompted by the fact that many institutions switch to mobile apps to milk customer details for marketing purposes.

Nineteen years ago, I wrote about the bank's decision to introduce the security token; it cost me $15 to buy one and use it until it stopped working about three or four years ago. The bank supplied a free replacement when the token stopped working.

With that token, one goes to the bank website, enters an access ID and a password and then presses the token to generate a six-figure security code. Fresh codes have to be generated when making payments.

The new procedure is more cumbersome as one has to switch between the desktop site and one's mobile phone in order to effect authentication. But then the bank does not offer a choice of authentication methods.

The security token offers a new code every time; with the mobile app one has to tell the desktop site that one is indeed whom one is claiming to be, and then input a four-digit code which is set up at the time one makes the switch.

The same procedure has to be gone through when one is making a financial transaction.

I have used that token, and a replacement, since it came into use and there has _never_ been any instance where there was a warning that it was insecure. The question that comes to mind is, if something ain't broken, then why try to fix it?

Read 136 times

Please join our community here and become a VIP.

Subscribe to ITWIRE UPDATE Newsletter here
JOIN our iTWireTV our YouTube Community here
BACK TO LATEST NEWS here


Lead-Machine_pink_600x260.jpg

ELASTICON SYDNEY 2024 LATEST ADVANCEMENTS IN GENERATIVE AI

On 20 February, keynote addresses from NAB, Canva, AWS, and Google Cloud, among others, will feature at ElasticON Sydney 2024.

This event will explore the latest advancements in generative AI

The one-day conference, hosted by leading search analytics company Elastic, will include networking drinks, hands-on labs, technical sessions and a stellar line-up of keynote speakers from finance, technology, and government e=sectors.

ElasticON Sydney 2024 promises to be an enriching experience with a comprehensive exploration of the latest developments in security, observability, generative AI and their real world applications

Don't miss out on this opportunity to network and find answers for what's next from your industry peers and leaders


Register for ElasticON Sydney 2024

REGISTER HERE!

PROMOTE YOUR WEBINAR ON ITWIRE

It's all about Webinars.

Marketing budgets are now focused on Webinars combined with Lead Generation.

If you wish to promote a Webinar we recommend at least a 3 to 4 week campaign prior to your event.

The iTWire campaign will include extensive adverts on our News Site itwire.com and prominent Newsletter promotion https://itwire.com/itwire-update.html and Promotional News & Editorial. Plus a video interview of the key speaker on iTWire TV https://www.youtube.com/c/iTWireTV/videos which will be used in Promotional Posts on the iTWire Home Page.

Now we are coming out of Lockdown iTWire will be focussed to assisting with your webinars and campaigns and assistance via part payments and extended terms, a Webinar Business Booster Pack and other supportive programs. We can also create your adverts and written content plus coordinate your video interview.

We look forward to discussing your campaign goals with you. Please click the button below.

MORE INFO HERE!


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK