Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7
563 posts

Ultimate Geek
+1 received by user: 89


  # 992410 22-Feb-2014 17:15
Send private message

webwat:
nzkc: They're also restricted to 8 characters.  I brought this up with them on Twitter - got nowhere with them.


Apparently that is a limitation of their ancient core banking software as it has evolved over the years, apparently cant be changed without a major system upgrade. Kiwi Bank have announced they plan to fully replace their core banking system, and have sparked comments that its such a massive project it could kill a small bank like them if they get it wrong.

I think when I signed up with ASB the password had to be 8 characters, and could only be numbers or lowercase letters at that time.


Whilst this is probably the case (an archaic backend) it still doesn't mean they have to pass those limitations through to the frontend as mentioned previously:

kenkeniff: ...
Any backend use of these passwords (authentication / encryption) should be restricted to a sufficiently randomly individually salted derivative of the original password (i.e. a HASH).


(Within following standard best practices for authentication) they should allow you to pick virtually whatever password you want.

They can then use that password to either decrypt their randomly assigned 8-char backend password for your account or simply authenticate a database query of it.

Either way, it's dumb thinking they have to pass mainframe constraints onto the UI because they can't be bothered adding a layer of abstraction.





618 posts

Ultimate Geek
+1 received by user: 173


  # 992413 22-Feb-2014 17:20
Send private message

webwat:
Apparently that is a limitation of their ancient core banking software as it has evolved over the years, apparently cant be changed without a major system upgrade.


I understand that is correct.  However, I believe ASB are also moving (or have moved) to SAP for their core banking.  

It makes me wonder if they're storing it in plain text rather than a hash of the password.  Surely not you'd think...but we've seen big organisations make simple mistakes like this in the past.

 
 
 
 


563 posts

Ultimate Geek
+1 received by user: 89


  # 992438 22-Feb-2014 17:32
Send private message

nzkc:
webwat:
Apparently that is a limitation of their ancient core banking software as it has evolved over the years, apparently cant be changed without a major system upgrade.


I understand that is correct.  However, I believe ASB are also moving (or have moved) to SAP for their core banking.  

It makes me wonder if they're storing it in plain text rather than a hash of the password.  Surely not you'd think...but we've seen big organisations make simple mistakes like this in the past.


Remember COBOL pre-dates MD5 etc by some decades..

Can't imagine them adding that functionality when it came along but not addressing others like the password limitations..


Banking is one of those industries long overdue for a massive shake up IMO. It won't be long before something comes along to completely disrupt the market and banks will be wondering what hit them..maybe Bitcoin will be it? (but lets not get off topic here).





270 posts

Ultimate Geek
+1 received by user: 35


  # 992541 22-Feb-2014 20:31
Send private message

kenkeniff: Banking is one of those industries long overdue for a massive shake up IMO.

You haven't seen Youmoney from bnz yet?

773 posts

Ultimate Geek
+1 received by user: 196


  # 992547 22-Feb-2014 20:55
Send private message

I for one would love my bank to offer a token that cheap($1 a month) for non business accounts, westpac are you listening?

563 posts

Ultimate Geek
+1 received by user: 89


  # 992548 22-Feb-2014 21:08
Send private message

kendog:
kenkeniff: Banking is one of those industries long overdue for a massive shake up IMO.

You haven't seen Youmoney from bnz yet?


A small step in the right direction but still a long long way to go..

loceff13: I for one would love my bank to offer a token that cheap($1 a month) for non business accounts, westpac are you listening?


Maybe we should start a wishlist thread?






36 posts

Geek
+1 received by user: 38

Trusted
ASB

  # 1184887 28-Nov-2014 13:40
7 people support this post
Send private message

Hi everyone, we are conscious we haven’t updated you for some time on this thread, but that doesn't mean we have forgotten you. Our dev team have been working hand-in-hand with our security guys for some time and are making some concrete progress on the FastNet password issues you have raised.

We will update you again early next year with some firmer timeframes as the planning and execution of these changes is reasonably extensive.

Thanks again for all your feedback and patience. ^FC

Fiona Colgan, General Manager Digital

 
 
 
 


3082 posts

Uber Geek
+1 received by user: 500

Trusted
Subscriber

  # 1185319 29-Nov-2014 11:05
One person supports this post
Send private message

Well, gotta give ASB credit - they're actually paying attention, participating in social media, and making plans to fix issues people have with their platform.  Major kudos.

19282 posts

Uber Geek
+1 received by user: 2600
Inactive user


  # 1185320 29-Nov-2014 11:08
Send private message

Kyanar: Well, gotta give ASB credit - they're actually paying attention, participating in social media, and making plans to fix issues people have with their platform.  Major kudos.


Have to agree Thumbs up to @ASB :)

65 posts

Master Geek
+1 received by user: 1


  # 1252367 6-Mar-2015 16:31
Send private message

ASBBank: We will update you again early next year with some firmer timeframes as the planning and execution of these changes is reasonably extensive.


As we could arguably be nearing the end of "early next year", which I'll arbitrarily define as being within the first quarter of 2015, is there any update on this issue?

2940 posts

Uber Geek
+1 received by user: 406


  # 1252372 6-Mar-2015 16:42
Send private message

Frittmann:
ASBBank: We will update you again early next year with some firmer timeframes as the planning and execution of these changes is reasonably extensive.


As we could arguably be nearing the end of "early next year", which I'll arbitrarily define as being within the first quarter of 2015, is there any update on this issue?


https://www.asb.co.nz/story27372.aspx

Some downtime early this Sunday morning for scheduled maintenance. Unsure if it's related.
Havnt had a notification through the iOS ASB app for something like this before.




Bachelor of Computing Systems (2015)

 

--

 

Late 2013 MacBook Pro with Retina Display (4GB/2.4GHz i5/128GB SSD) - HP DV6 (8GB/2.8GHz i7/120GB SSD + 750GB HDD)
iPhone 6S + (64GB/Gold/Vodafone NZ) - Xperia Z C6603 (16GB/White/Spark NZ)

Sam, Auckland 


Awesome
4845 posts

Uber Geek
+1 received by user: 1099

Trusted
Subscriber

  # 1252377 6-Mar-2015 16:59
One person supports this post
Send private message

This isn't limited to just ASB. My Citibank Australia account is the same. Doesn't matter what case I enter my password, it works.

Annoyingly tho, if you have 2FA turned on, you have to use it even to just view your account transactions. They over bake the security on one part of the online banking, and under bake it on others.




Twitter: ajobbins


36 posts

Geek
+1 received by user: 38

Trusted
ASB

  # 1254144 9-Mar-2015 16:15
Send private message

Thanks for your question. The teams here are still working very hard on this and we’ll have some more information to update you with as we get closer to the go live date. They successfully completed more of the backend technology changes in preparation for this during Sunday’s scheduled maintenance.  Don't worry, we haven’t forgotten you! - FC [Fiona Colgan, GM Digital]

36 posts

Geek
+1 received by user: 38

Trusted
ASB

  # 1305755 15-May-2015 12:44
8 people support this post
Send private message

Hi everyone, thanks for your patience on this.

We will be introducing these changes soon - more info over on our blog here: https://blog.asb.co.nz/posts/2015/05/asblogin.html 

Thanks ^SM




Social Media team, ASB Bank Ltd www.asb.co.nz/social

2078 posts

Uber Geek
+1 received by user: 230

Subscriber

  # 1306128 15-May-2015 20:49
Send private message

ASBBank: Hi everyone, thanks for your patience on this.

We will be introducing these changes soon - more info over on our blog here: https://blog.asb.co.nz/posts/2015/05/asblogin.html 

Thanks ^SM


Is there any chance you will do this for Bankdirect or NZ Home Loans accounts?  Those sites are well overdue for a bit of love.  I understand you may not be able to do this for NZ Home Loans but you have no excuses for not keeping Bankdirect up to date as that is a 100% ASB invention.

1 | 2 | 3 | 4 | 5 | 6 | 7
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Dunedin selects Telensa to deliver smart street lighting for 15,000 LEDs
Posted 18-Jul-2019 10:21


Sprint announces a connected wallet card with built-in IoT support
Posted 18-Jul-2019 08:36


Educational tool developed at Otago makes international launch
Posted 17-Jul-2019 21:57


Symantec introduces cloud access security solution
Posted 17-Jul-2019 21:48


New Zealand government unveils new digital service to make business easier
Posted 16-Jul-2019 17:35


Scientists unveil image of quantum entanglement
Posted 13-Jul-2019 06:00


Hackers to be challenged at University of Waikato
Posted 12-Jul-2019 21:34


OPPO Reno Z now available in New Zealand
Posted 12-Jul-2019 21:28


Sony introduces WF-1000XM3 wireless headphones with noise cancellation
Posted 8-Jul-2019 16:56


Xero announces new smarter tools, push into the North American market
Posted 19-Jun-2019 17:20


New report by Unisys shows New Zealanders want action by social platform companies and police to monitor social media sites
Posted 19-Jun-2019 17:09


ASB adds Google Pay option to contactless payments
Posted 19-Jun-2019 17:05


New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35


Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39


TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.