8 ms·
What a nasty thing! Seems there's no other way but using dedicated hardware. BankID also needs to be tied to a specific SIM, so I suspect that they somehow sto
by kaivi 5y ago
What a nasty thing! Seems there's no other way but using dedicated hardware.
BankID also needs to be tied to a specific SIM, so I suspect that they somehow store and validate SIM ID and IMEI on the other side.
- donatzsky 5y agoCould also be that they install an applet on the SIM. This might also explain why eSIMs don't work.
- kwhitefoot 5y agoThat's rather the point of BankID. It helps prevent things like SIM jacking. Much more secure than using ordinary texts for 2FA.
- Abishek_Muthian 5y agoWallet/Banking apps in India incl. Google Pay requires the mobile number on the phone to match the bank records due to central bank regulations, I assume IMEI verification happens behind the scenes with direct telecom API. Wallet apps sends outgoing SMS randomly to verify this. Suddenly my wallet apps stopped functioning as SMS couldn't be sent and I presumed I had messed up with telephony services with some security settings and was searching radio logs to find the culprit where I found that SMS validity was nil. Searching further I found that our telecom oligopoly (soon to be duopoly) decided to remove outgoing SMS from low-tier plans. I don't do real-time communication, telephony services are only useful to me for receiving the 2FA OTP and so I had low tier plans. Goodbye wallet apps.