Competitor update

Surely, porting can’t be that hard considering the entire thing is written in Unity. :upside_down:

True (ps love the upside down smiley)

Innovation :roll_eyes:

2 Likes

At long last… actually very pleased that they’ve finally added it.

2 Likes

Good to see it also supports the other LBG apps such as the Halifax one. It’s annoying that some banks are late in accepting Touch ID. The new MBNA app still doesn’t appear to have it.

Any TSB customers able to confirm if their app has it? I know when they were sold off they still used the same online banking infrastructure but not sure if they still do.

TSB uses a different online banking system to LBG for some time now. Also their app doesn’t have TouchID :frowning:

Wow, even “we were nearly a year late to Apple Pay” Barclays recently figured out that Touch ID exists!

2 Likes

The Royal Bank of Scotland and NatWest have both added Apple’s Touch ID as a way to sign- in.

A group of hackers managed to get around TouchID only a day after the launch by making a fake finger from a photograph of a fingerprint left on a glass surface.

Apple said TouchID “was not a total replacement for traditional security measures” and was meant to make unlocking the phone more convenient.

Ben Schlabs, of SRLabs, a German hacking think tank, said: “The security implications are the same, it is just as dangerous… I think it has been shown that it is pretty easy to spoof it and the risks aren’t fully understood.” He said using TouchID alone to gain access to a banking app introduced dangers that were not present when using passwords or Pins. "Just the fact that you are carrying the key around with you and leave copies of it exposed everywhere you go makes it a very different risk to something that is inside your brain. The risks are poorly understood.

I use a couple of the apps for the main high street banks and this is cutting edge versus what I get from them currently… Whenever they roll out updates it just seems to be to add some vague stylistic changes as opposed to anything feature driven.

Not to say that I’d be entirely happy about giving over access to my accounts to just a fingerprint though… it’s more about just the idea of features in general tbh.

Also, re: main thread, Atom have been fairly active about sending me some emails to inform me of the Android release.

I assume this down to the new owners having a different approach. They don’t have TouchID in their app in Spain either

I think that it’s healthy to have a definite level of paranoia about digital security in general, doubly so when it comes to banking.

So it’s useful to have white hat types pointing out the vulnerabilities, for sure.

agree with you on other banks…it is often just a change of fonts or a slight tweek in layout.

as for Atom, after emailing an announcement about their new Android app they followed it up 24 hours later with a mailing to a block of their waiting list including a code to activate/sign-in to their app

It’s fun to try and breach security measures like this. But I don’t buy into the fear that fingerprint verification is less secure than a passcode at all.

A thief is going to have to steal your phone, find that fingerprint & have a way to capture & format your fingerprint so that it’s useable. Obviously it’s doable if someone specifically targets you and spends enough time around you, to access your phone and your fingerprint but that approach isn’t going to work for your common opportunistic thief.

Compare that challenge to being able to try to hack into your phone an infinite number of times via phishing or Wi-Fi exploits etc. though and I’m confident that fingerprint verification is the better option, even if it’s not perfect.

Fair enough, my frustration was actually the speed of implementation + the fact that this adopting tool which has been provided by Apple, is the biggest change - in terms of improving the UX - that Lloyds have made to their app in as long as I can remember.

I know that the big banks have to overcome some significant obstacles (of their own making) when adopting new technology. But this is why I really want :mondo: to succeed because the pace of change & innovation is so much greater.

Agree, it deters opportunists. Only real pros with targetted individuals will fake fingerprints or have equipment for reading metalic strips without touching a card (it is now possible to skim from a distance info off the metalic strip of a non contactless card). I think biggest risk is still down to gullible people being scammed by phishing emails or poor security on websites leading to users passwords being stolen.

1 Like

Yep Monzo has to succeed. Old banks can only tack on new tech to old systems via some interface, what they need is to replace all their systems but the practicalities of doing that while still operating/trading and processing transactions for their scale of customers means this is highly improbable. If old banks introduce new tech it is highly likely to take them time introducing it, they can’t even cope with their exisiting tech (as evidenced by day long outages in last year or two)

We’re straying a bit from the topic here but it’s important to remember that Touch ID is not itself an authentication method, it is simply authorising the use of an item in an already unlocked keychain that is secured by a key derived from the passcode/password that you use for your device.

2 Likes

I’ve had to explain that to people so many times before :laughing:

Well… About that … Their IT systems are still provided by LBG.