Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | ... | 12
Kyanar
4089 posts

Uber Geek
+1 received by user: 1684

ID Verified
Trusted

  #670948 11-Aug-2012 11:19
Send private message

Looking at their demo, I wouldn't touch it with a 6 kilometre barge pole. Opens online banking in a frame really? Then interacts with your online banking window to fiddle with the forms inside it.

Yeah, nah, that's the dumbest idea I've ever seen.



Behodar
11101 posts

Uber Geek
+1 received by user: 6092

Trusted
Lifetime subscriber

  #670956 11-Aug-2012 11:36
Send private message

I've just tried that demo too... I'd use it to get a $240 iPhone :)

manhinli
2483 posts

Uber Geek
+1 received by user: 4

Trusted

  #670967 11-Aug-2012 12:16
Send private message

I've grudgingly had to use it to avoid the stupidly high credit card surcharges (at one time, ~10% of the airfare.)

nickd: I tried with Air NZ but it rejected me because I'm on a mac. At least it pops up a message saying call up the call centre and use your credit card, tell them you've seen this message and they will waive the fee.

I've haven't tried this myself but it has worked for others. However, I believe they were meant to release a cross-platform version a while back... so that 'excuse' might not work for long.




Find me on Twitter!

I posted 1, 2 x 10^3 times!



Kyanar
4089 posts

Uber Geek
+1 received by user: 1684

ID Verified
Trusted

  #670968 11-Aug-2012 12:19
Send private message

I can't see them releasing a cross-platform version - that thing's a .NET Framework application (unfortunately they ran it through a code encrypter so I can't see what it's really doing. Does wonders for trustworthyness right?)

manhinli
2483 posts

Uber Geek
+1 received by user: 4

Trusted

  #670974 11-Aug-2012 12:31
Send private message

Kyanar: I can't see them releasing a cross-platform version - that thing's a .NET Framework application (unfortunately they ran it through a code encrypter so I can't see what it's really doing. Does wonders for trustworthyness right?)

Maybe via. Mono? I have no idea.


I don't really get why merchants don't just release details/reference numbers for people to pay with. People have been doing that for decades. Qantas in Australia have a BPay (bill payment) option which opens up a reservation for a limited time for you to pay.

POLi seems to only be a recognised way to automatically handle bill payment transaction details - the actions required to do it still requires user interaction... I'm guessing there's probably some backend stuff which tells the merchant to stop holding out for the transaction (as would be required normally.)

It might as well be some Greasemonkey-like script running on top.




Find me on Twitter!

I posted 1, 2 x 10^3 times!

coffeebaron
6304 posts

Uber Geek
+1 received by user: 3567

Trusted
Lifetime subscriber

  #670984 11-Aug-2012 13:00
Send private message

I wouldn't use it. The only way I do online banking is going to the back site myself.




Rural IT and Broadband support.

 

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71 
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

 

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com


 
 
 

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.
RmACK
196 posts

Master Geek
+1 received by user: 27


  #670990 11-Aug-2012 13:12
Send private message

Would using Poli not breach the terms with ones bank to not share your banking password with others? Surely the parent iframe could still use javascript to potentially log keystrokes?

I'm on Mac so haven't tried it, but wouldn't go near it anyway and resent the over-the-top card fees airnz charge as an alternative.





Kyanar
4089 posts

Uber Geek
+1 received by user: 1684

ID Verified
Trusted

  #671051 11-Aug-2012 15:12
Send private message

RmACK: Would using Poli not breach the terms with ones bank to not share your banking password with others? Surely the parent iframe could still use javascript to potentially log keystrokes?

I'm on Mac so haven't tried it, but wouldn't go near it anyway and resent the over-the-top card fees airnz charge as an alternative.


It's not a frame, it's a custom browser application that embeds your online banking then screws with the HTML document the bank returns to strip out the options PoLi don't want you using.  Yes, it absolutely could keylog your login.  And because it's a closed source application which they've encrypted, you'd have no way of knowing if it did.

Worse, according to Air NZ's FAQs, POLi does not necessarily have an agreement with your bank, so technically using it is a violation of your bank's terms and conditions.

sleemanj
1514 posts

Uber Geek
+1 received by user: 315


  #671119 11-Aug-2012 18:39
Send private message

I have used it from both sides, as customer, and as developer.

It is not something I recommend to my clients.

Unless you are using a fairly recent and up to date version of windows, you are out of luck. When people want to give you money, telling them they can't unless they are using an up to date version of windows... is counter productive!

Add to that the fact that the merchant isn't actually assured of getting the money (some banks allow cancelling direct credits within some hours) anyway so they still need to reconcile their bank accounts to their website systems...







---
James Sleeman
I sell lots of stuff for electronic enthusiasts...


richms
29104 posts

Uber Geek
+1 received by user: 10222

Trusted
Lifetime subscriber

  #671649 13-Aug-2012 00:26
Send private message

Ive always wondered what if you gave poli a fake banking site to work with. It would think you paid but really nothing happenef.




Richard rich.ms

Skolink
1081 posts

Uber Geek
+1 received by user: 32


  #671660 13-Aug-2012 08:12
Send private message

PoLi has failed 2 of 3 times I have used it on AirNZ and Jetstar. The transaction went through, but then the airline booking/payment confirmation page never loaded.
I had to wait a week for one lot of tickets to be confirmed.
I also am extremely uncomfortable allowing a 3rd party application access to my internet banking, but it meant avoiding a $24 credit card fee.

Didn't AirNZ used to hold the booking for 24hours until you paid by direct credit using a reference number? I guess that meant alot of seats in limbo.

Perhaps AirNZ should switch to Pago? It's a pretty annoying system (now forced to use it on Powershop), but at least it seems more secure.


 
 
 
 

Shop now for Dyson appliances (affiliate link).
RedJungle
Phil Gale
1108 posts

Uber Geek
+1 received by user: 46

Trusted
Red Jungle
Subscriber

  #671814 13-Aug-2012 13:50
Send private message

manhinli:
I don't really get why merchants don't just release details/reference numbers for people to pay with.


I have implemented POLi for a council client. The reason they did not simply publish/give out their bank details was that typically people are incredibly unreliable at providing correct/any reference information. And it then becomes a major nightmare/cost for them to reconcile all these random payments (often part-payments) to someones rates / dogs / infringements etc.

sleemanj
1514 posts

Uber Geek
+1 received by user: 315


  #671822 13-Aug-2012 14:00
Send private message

RedJungle: that typically people are incredibly unreliable at providing correct/any reference information


Very true, and it's the only reason that POLi can be useful - if you are doing a high volume of transactions.  If you're not, then it's easy enough to manually work it out.

What is really needed is for the banks to all get together and come up with really simple and standard "payment request" api,

  http://thebank.co.nz/request_money?destination=xx-xxxx-xxxxxx-xx&reference=xxxx&amount=xx.xx

redirect the customer to it (after they have chosen which bank they use), the bank then presents all the usual internet banking login, and gives their normal old transfer money form prefilled with the details.

The only reason I can think that banks havn't already done this, is that it might eat into their credit card transactions.





---
James Sleeman
I sell lots of stuff for electronic enthusiasts...


davidcole
6099 posts

Uber Geek
+1 received by user: 1465

Trusted

  #671825 13-Aug-2012 14:02
Send private message

sleemanj:
RedJungle: that typically people are incredibly unreliable at providing correct/any reference information


Very true, and it's the only reason that POLi can be useful - if you are doing a high volume of transactions.  If you're not, then it's easy enough to manually work it out.

What is really needed is for the banks to all get together and come up with really simple and standard "payment request" api,

  http://thebank.co.nz/request_money?destination=xx-xxxx-xxxxxx-xx&reference=xxxx&amount=xx.xx

redirect the customer to it, the bank then presents all the usual internet banking login, and gives their normal old transfer money form prefilled with the details.

The only reason I can think that banks havn't already done this, is that it might eat into their credit card transactions.




OFX already handles all of this.  In NZ only ASB (I think) implement it, and then it's only for statement export.  Bu tin reality, OFX (Open Financial Exchange) covers payments exports everything between apps and banks.

http://www.ofx.net/DownloadPage/Downloads.aspx




Previously known as psycik

Home Assistant: Gigabyte AMD A8 Brix, Home Assistant with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Shelly Humidity and Temperature sensors
Media:Chromecast v2, ATV4 4k, ATV4, HDHomeRun Dual
Server
Host Plex Server 3x3TB, 4x4TB using MergerFS, Samsung 850 evo 512 GB SSD, Proxmox Server with 1xW10, 2xUbuntu 22.04 LTS, Backblaze Backups, usenetprime.com fastmail.com Sharesies Trakt.TV Sharesight 


sleemanj
1514 posts

Uber Geek
+1 received by user: 315


  #671827 13-Aug-2012 14:06
Send private message

davidcole:
OFX already handles all of this.  In NZ only ASB (I think) implement it, and then it's only for statement export.  Bu tin reality, OFX (Open Financial Exchange) covers payments exports everything between apps and banks.

http://www.ofx.net/DownloadPage/Downloads.aspx


You have the wrong end of the stick.

I'm talking about an automated way for customers, people buying things, to be presented a pre-filled-out form, in their ordinary internet banking, to allow them to transfer money to you ("internet banking payment") with a given set of reference, to your specified account.

For example a link "Click Here To Pay With Yourbank Internet Banking", goes to the customers bank, the customer logs in, and they are presented with their normal type of make payment form but already completed with the details they need to provide.

OFX is about downloading transactions from your account, to your application, or indeed in some cases feeding the other direction.  It's not about a customer initiating a payment.

Edit To Add:  One other consideration that banks may have, is that people clicking a link to go to their bank during a payment process, might muddy the waters with regards to phishing awareness.  But it's still a lot better than the alternative - POLi.





---
James Sleeman
I sell lots of stuff for electronic enthusiasts...


1 | 2 | 3 | 4 | 5 | 6 | 7 | ... | 12
View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.