Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Rikkitic

Awrrr
18657 posts

Uber Geek

Lifetime subscriber

#247952 4-Mar-2019 18:08
Send private message

My security is fairly primitive. As a pensioner my needs are simple and I don’t bother with Internet banking. I don’t keep anything of value on my computers and I don’t visit shady sites so I only have basic security (Windows firewall, Defender, Malwarebytes). I have never had any issues. My security is basically keeping a low profile.

 

I need to undergo some medical procedures in Thailand in a few months and I have to figure out a good way of making substantial payments from my Kiwibank account. I will probably have to activate Internet banking. I do not have a credit card but I do have the usual Visa debit/EFTPOS card and I can make overseas payments with that. Until now I have kept most of my funds in a Saver account with only the Now account linked to the card. That way even I can only access what is on that account. To transfer funds I have to ring the bank or physically go there. This has the virtue of simplicity and it has worked well for me until now.

 

However I may be using borrowed computers or odd browsers on unknown ISPs in Thailand, so I need to find the best possible way of protecting my account when making overseas payments or withdrawals. I don’t carry a cell phone and I don’t really want to, so I am looking at other 2FA alternatives, but I’m not sure what to look for. I did read the Yubikey review @freitasm has posted. Something like that, such as a USB dongle I can plug into any computer, sounds like it might be exactly what I need, but I’m not completely sure. Any advice, recommendations or suggestions are welcome. Thanks in advance.

 

 





Plesse igmore amd axxept applogies in adbance fir anu typos

 


 


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
freitasm
BDFL - Memuneh
79254 posts

Uber Geek

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #2190869 4-Mar-2019 18:10
Send private message

You will have to use what the bank offer. NZ Banks don't seem to support FIDO standards yet so it is either a card, app, SMS or a hardware token (depending on the bank). Talk to your bank.

 

As for other services then you will be using 2FA as an authenticator app on a smartphone (I recommend Authy) or a hardware key (like the Yubikey). Again it will depend of the service.





Please support Geekzone by subscribing, or using one of our referral links: Samsung | AliExpress | Wise | Sharesies | Hatch | GoodSyncBackblaze backup




Rikkitic

Awrrr
18657 posts

Uber Geek

Lifetime subscriber

  #2190873 4-Mar-2019 18:18
Send private message

Okay, thanks for that. Very helpful.

 

 





Plesse igmore amd axxept applogies in adbance fir anu typos

 


 


wellygary
8312 posts

Uber Geek


  #2190883 4-Mar-2019 18:45
Send private message

I do have the usual Visa debit/EFTPOS card and I can make overseas payments with that.

 

Upgrading to credit rather than debit card will give you an extra level of protection in that "your" funds are not actually used in any transactions until you get the bill at the end of the month... if there is anything dodgy you can dispute it more easily, .. pretty sure all the banks offer a no frills low annual fee card..

 

You might even be able to time it so that you dont have to pay you credit card bill until you are back in NZ.. (depending on how long you are away)




freitasm
BDFL - Memuneh
79254 posts

Uber Geek

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #2190928 4-Mar-2019 19:02
Send private message

Good advice. Credit cards allow you to dispute transactions, debit cards don't have this feature IIRC.




Please support Geekzone by subscribing, or using one of our referral links: Samsung | AliExpress | Wise | Sharesies | Hatch | GoodSyncBackblaze backup


timmmay
20575 posts

Uber Geek

Trusted
Lifetime subscriber

  #2190949 4-Mar-2019 20:12
Send private message

It's a shame Kiwibank don't offer a physical token you can take.

 

While the advice here is good, when it comes to banking you should validate any advice you get online with your bank.


OldGeek
893 posts

Ultimate Geek

ID Verified
Lifetime subscriber

  #2190960 4-Mar-2019 20:45
Send private message

I can understand your reluctance to use Internet Banking, and you clearly face major medical issues (with associated stress) if you are headed offshore for treatment.  I would strongly suggest you talk to your bank about your concerns and see what options they suggest.  Make sure they cover concerns you have such as the use of devices you dont own.

 

Post back to this thread if you need independent advice on what your bank is suggesting you do.





-- 

OldGeek.

 

Voyager referral code:  https://refer.voyager.nz/6XQR2QG9Q


jonathan18
7413 posts

Uber Geek

ID Verified
Trusted

  #2190961 4-Mar-2019 20:48
Send private message

I generally use the Kiwbank app on my phone, and (once set up) this uses one's fingerprint for logging in.

 

As for other authentication protocols: Kiwibank's 2FA is fairly weak - to log into the website (ie, via a browser) they use a random selection of one of three (I think) 'questions' to which you need to add the missing letters to the marked box; there are preset options (of the type 'What city did your parents meet in?'), but you can also set your own questions/answers. This doesn't get used on the phone app (perhaps initially for set-up?).

 

On my phone I've also noticed that for certain transactions (perhaps the first to a new account number and/or over a certain amount?) I've been texted a code to authenticate the transaction. 


 
 
 

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.
mattwnz
20141 posts

Uber Geek


  #2190992 4-Mar-2019 21:37
Send private message

jonathan18:


I generally use the Kiwbank app on my phone, and (once set up) this uses one's fingerprint for logging in.


As for other authentication protocols: Kiwibank's 2FA is fairly weak - to log into the website (ie, via a browser) they use a random selection of one of three (I think) 'questions' to which you need to add the missing letters to the marked box; there are preset options (of the type 'What city did your parents meet in?'), but you can also set your own questions/answers. This doesn't get used on the phone app (perhaps initially for set-up?).


On my phone I've also noticed that for certain transactions (perhaps the first to a new account number and/or over a certain amount?) I've been texted a code to authenticate the transaction. 



 


I don't think the interface  has been updated for many years. The fact that it doesn't use mobile responsive design, or even a mobile view shows it is pretty ancient. 


mdf

mdf
3513 posts

Uber Geek

Trusted

  #2191007 4-Mar-2019 22:14
Send private message

You should have a chat to Kiwibank. Some years ago I got locked out of Kiwibank online banking as they detected "suspicious activity" - in my case an internet banking log on from a country they thought was suspicious even though I was on holiday there. Perhaps because I was on holiday there? All got sorted relatively quickly but it is worth letting them know your travel plans are. They may have suggestions too.

 

In any event, Kiwibank have a Loaded for Travel prepaid card that could be an alternative to a Visa. You can load it via internet banking from your existing accounts, or if it is an option, you can have someone else load in from NZ using a secure account number (there is a load only account number and a spend account number). The latter would save you having to register for online banking at all, and you can't spend more than is loaded on it. You'd need some way of contacting that person though which may well be the dreaded cell phone, though you might be able to avoid a smart phone and just text?


MurrayM
2455 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #2191057 5-Mar-2019 08:58
Send private message

It should be more secure to use a banks app on a phone rather than try to log into their website. You've also got a bit more come-back if something goes wrong.

 

A credit card gives you more protection than a debit card. My credit card was skimmed in London several years ago and the crooks went on a spending spree in Harrods to wrack up several thousand pounds worth of debt. I didn't find out until I had returned to NZ but my bank took ownership and removed the debt.

 

Don't forget to tell your bank where you're going and the dates. That way they won't flag your ligit transactions as being suspicious.


timmmay
20575 posts

Uber Geek

Trusted
Lifetime subscriber

  #2191075 5-Mar-2019 09:08
Send private message

A cheap Android phone, purchased in New Zealand, using a Thailand SIM is probably the best, easiest, and most secure way to do this.


Rikkitic

Awrrr
18657 posts

Uber Geek

Lifetime subscriber

  #2191102 5-Mar-2019 09:22
Send private message

I would rather avoid a phone if possible. I don't know anything about phones. I have never had one. On the few occasions I tried to use one I couldn't figure out how to make it work.

 

If I am in a foreign country undergoing treatment and trying to make a major financial transaction, I will already be anxious. At my age I don't want to compound that by having to screw with a piece of technology I am not familiar with and don't feel confident about. That may sound silly to anyone younger than 60 but it is how I feel.

 

Edited to add this postscript: I actually tried to do this once. Someone gave me a cheap Spark phone and I took it to Thailand just to use as a phone. I had forgotten about that. When I got to Thailand I did buy a local SIM but couldn't get it to work. A Thai computer technician I consulted couldn't get it to work either. It never did work and the phone is still sitting on a shelf somewhere. I can't afford to have something like that happen again after I am already there.

 

 

 

 

 

 





Plesse igmore amd axxept applogies in adbance fir anu typos

 


 


timmmay
20575 posts

Uber Geek

Trusted
Lifetime subscriber

  #2191103 5-Mar-2019 09:25
Send private message

Can you just call Kiwibank on the phone and ask them to do the transaction manually? They'll ask standard questions to make sure it's you. They might charge a fee, but it'd probably be worth paying for ease of use and peace of mind.


Batman
Mad Scientist
29760 posts

Uber Geek

Trusted
Lifetime subscriber

  #2191105 5-Mar-2019 09:26
Send private message

The phone is not the most secure thing in the world.

 

Someone who really wanted your money would get your phone and they will get all the codes to get in if they knew a couple more information about your account.


freitasm
BDFL - Memuneh
79254 posts

Uber Geek

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #2191106 5-Mar-2019 09:35
Send private message

Batman:

 

The phone is not the most secure thing in the world.

 

Someone who really wanted your money would get your phone and they will get all the codes to get in if they knew a couple more information about your account.

 

 

It depends what "phone" is in this context. A voice call? Yes, not secure - know a few things about you and a person with social engineering skills could drain someone's account. An app? More secure than phone calls. Phones can be locked out, require fingerprint for transactions/login, require a second authentication factor for transactions, etc.





Please support Geekzone by subscribing, or using one of our referral links: Samsung | AliExpress | Wise | Sharesies | Hatch | GoodSyncBackblaze backup


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.