Online/mobile security level disparity.

[wolfracesonic]

I’ve been moving a lot of money around lately and been surprised at the disparity in the number of hoops you have to jump through to transfer funds amongst various banks.. Some on my iPad, fingerprint and your in, do what you like, others on my iPad, customer number then receive text with code, yet more wanting the 25347th character from War & Peace. Nationwide came tops on my PC, me having received 3 text codes in order to move money, this having already been logged in. All the extra layers are for my own good I agree but I’m curious at what various institutions consider safe.

[bogie]

How much Security likely depends on how much budget the security team has, how much they are forced to implement to meet regulatory requirements, and how many times they have been hacked before

[alscar]

I know what you mean on Nationwide - whilst their portal is reasonable to use the “ constant “ re entering of the 2 tier text number is painful.
I was on it recently moving money from one account to another both for me and also a relative for whom I hold POA and altogether 6 text receipts required - this was after initial log on !
Mind you have just accessed local Doctors surgery for repeat prescription - already has 2 tier plus password and they are suggesting an app instead.
Can’t see that working for many of the older residents.

[SpidersWeb]

alscar said:

Mind you have just accessed local Doctors surgery for repeat prescription - already has 2 tier plus password and they are suggesting an app instead.
Can’t see that working for many of the older residents.

The problem with GP surgeries doing this is they most often suggest an app for a company they have an agreement with and not the NHS app which should work with most surgeries irrespective of that agreement.

The NHS app is pretty damn easy to use, and if you have a phone that has biometric security (fingerprint or facial) then there are no additional passwords to enter or remember - open the app, put finger on phone / look at the phone, select 'request repeat medications' (which is top of the list), tick what you want, and press OK. The app is then updated to show when the prescriptions have been approved and sent to the pharmacy - and it confirms which pharmacy you want them sent to in the order process.

The NHS might be poor for some things, but the NHS app isn't one of them - but the problem is the GP surgeries not getting people to use that but some crappy app for a company they have an agreement with...

[LooneyTunes]

bogie said:

How much Security likely depends on how much budget the security team has, how much they are forced to implement to meet regulatory requirements, and how many times they have been hacked before

It’s not all about how easy it is to hack them. It is as much about the audit trail to show that, on the balance of probabilities, the customer themselves did initiate the transaction (handy when it comes to customers trying to dispute transactions later on).