2 ms·

> Not everyone cares about security updates. OK. But surely banks ought to. If you care about having a banking app, then you ought to care transitively.

amelius 4y ago
Banks don't care about security. See e.g. credit cards where the numbers are just printed in plain sight for everyone to copy them.
- throwaway744678 4y ago
  It's supposed to never leave your pocket or your hand. Besides, if someone gets your credit card number and purchases something, you can charge it back. The vendor is supporting the risk, not you.
  - amelius 4y ago
    > It's supposed to never leave your pocket or your hand. If you buy something in a store, you have no certainty that your CC number doesn't end in the hands of store personnel. > Besides, if someone gets your credit card number and purchases something, you can charge it back. You have to keep an eye on it. It is easy to overlook if the amount small is enough. All in all, I wouldn't call this good security practice.
vbezhenar 4y ago
Do they really? All they care is about some particular version of Android (like any other app). I don't think I ever saw any banking app which would check for presence of some particular security updates (not even sure if it's possible).
- bmacho 4y ago
  AFAIK if I use a bank app on an insecure phone, and they stole my money, the bank should give it back to me. Authentication is their job after all. But it is not much of as a problem right now. They definitely try to push people towards more secure and up-to-date systems, but as now, you still can bank from insecure systems as well, and allow your account to be stolen.
- yjftsjthsd-h 4y ago
  Right, like the good old "we care so much about security that we blocked rooted devices, but we make no effort whatsoever to check the security patch date":)
- serf 4y ago
  None of my banking apps will work on a rooted phone, so I need to keep a 'clean' android phone around if I care to use their app. (I don't.)
- deleted 4y ago
  [deleted]
aceazzameen 4y ago
Banks don't even do 2FA properly. They don't care.

amelius 4y ago

Banks don't care about security. See e.g. credit cards where the numbers are just printed in plain sight for everyone to copy them.

throwaway744678 4y ago
It's supposed to never leave your pocket or your hand. Besides, if someone gets your credit card number and purchases something, you can charge it back. The vendor is supporting the risk, not you.
- amelius 4y ago
  > It's supposed to never leave your pocket or your hand. If you buy something in a store, you have no certainty that your CC number doesn't end in the hands of store personnel. > Besides, if someone gets your credit card number and purchases something, you can charge it back. You have to keep an eye on it. It is easy to overlook if the amount small is enough. All in all, I wouldn't call this good security practice.

vbezhenar 4y ago

Do they really? All they care is about some particular version of Android (like any other app). I don't think I ever saw any banking app which would check for presence of some particular security updates (not even sure if it's possible).

bmacho 4y ago
AFAIK if I use a bank app on an insecure phone, and they stole my money, the bank should give it back to me. Authentication is their job after all. But it is not much of as a problem right now. They definitely try to push people towards more secure and up-to-date systems, but as now, you still can bank from insecure systems as well, and allow your account to be stolen.
yjftsjthsd-h 4y ago
Right, like the good old "we care so much about security that we blocked rooted devices, but we make no effort whatsoever to check the security patch date":)
serf 4y ago
None of my banking apps will work on a rooted phone, so I need to keep a 'clean' android phone around if I care to use their app. (I don't.)
deleted 4y ago
[deleted]

aceazzameen 4y ago

Banks don't even do 2FA properly. They don't care.