this post was submitted on 18 Aug 2023
139 points (99.3% liked)

Technology

59428 readers
2854 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s
[email protected]
[email protected]
L4s
enu
139
OCBC Bank locks out mobile app if 3rd party apps are detected (www.zdnet.com)
submitted 1 year ago by Calcium5332 to c/technology
23 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 22 points 1 year ago* (last edited 1 year ago) (2 children)

Could you sandbox the banking app in the work profile with something like Shelter?

It's unfortunate for those that can't switch banks, but this would be a strong reason for making me want to switch. I'd rather skip the one mobile banking app than uninstall every other app lol

Amid the complaints, industry regulator Monetary Authority of Singapore (MAS) released a statement voicing its support for the bank's security feature, which it said aims to address risks associated with downloading applications from unauthorized sources, since these may contain malware.

Maybe I just haven't encountered it, but are there malware apps? Just trying to get legitimate apps to work sometimes means having to enable debugging, approve permissions and jump through a whole bunch of warnings. Even then apps will get flagged by Play services (ex. Those game currency spoofer apps)

OCBC was the center of a spate of SMS phishing scams last year, which wiped out SG$13.7 million ($10.17 million) from the accounts of 790 customers. Scammers had manipulated SMS Sender ID details to push out messages that appeared to be from OCBC, urging the victims to resolve issues with their bank accounts. They then were redirected to phishing websites and instructed to key in their bank login details, including username, PIN, and One-Time Password (OTP).

That's not from bad apps... If anything this new policy will make me use the mobile website instead of the app.

[–] [email protected] 14 points 1 year ago

That's not from bad apps... If anything this new policy will make me use the mobile website instead of the app.

I'd also consider switching banks if it isn't too much of a hassle. They clearly can't invest well in terms of security for their users.

[–] [email protected] 3 points 1 year ago

Can't use the mobile website, because the OTP is generated via the app. So you'll still need the app. Standalone OTP tokens are being phased out; my bank's doing so from October this year.