Cybersecurity - Memes

1964 readers

2 users here now

Only the hottest memes in Cybersecurity

founded 1 year ago

MODERATORS

[email protected]

Indian ICICI bank app reverse security (lemmy.world)

submitted 10 months ago by [email protected] to c/[email protected]

22 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] -1 points 10 months ago* (last edited 10 months ago) (1 children)

There's no reason a VPN would increase your security, and many reasons why the bank would discourage the use of VPNs to access their systems

[–] [email protected] 1 points 10 months ago (1 children)

There's no reason a VPN would increase your security

So there's no benefit to using one to tunnel to your home network while on a public network at a cafe?

[–] [email protected] -1 points 10 months ago (1 children)

It would be nice if we were taking comments in context. In this case, WE'RE TALKING ABOUT A BANKING APP.

[–] [email protected] 1 points 10 months ago (1 children)

Which you presumably use while connected to the Internet, right?

[–] [email protected] -1 points 10 months ago* (last edited 10 months ago) (2 children)

Why are you tunnelling to your home network to use a banking app?

Your banking app, if it was decently written by a sane programmer, should be entirely immune to any MitM attacks that a VPN would allay. Thus you would not be receiving any major benefit from using a VPN with your banking app. On the other hand, there is significant security value in the bank being able to see the actual IP of connecting clients.

[–] [email protected] 1 points 10 months ago* (last edited 10 months ago) (1 children)

I'm not tunnelling to my home network in order to use the banking app. I'm tunnelling to my home network as part of my general way of accessing the internet. My banking app isn't the only thing running on my phone while I use it.

I don't want to have to turn it off just to use the banking app.

if it was decently written by a sane programmer

Better hope it is then, I guess.

On the other hand, there is significant security value in the bank being able to see the actual IP of connecting clients.

Can you expand on that?

[–] [email protected] -1 points 10 months ago* (last edited 10 months ago) (1 children)

On the other hand, there is significant security value in the bank being able to see the actual IP of connecting clients.

Can you expand on that?

Security analysis. If you used your card in country A 5 minutes ago, logging in from country B across the world should realise a red flag. That's a very basic example, but advanced versions can be extremely accurate.

[–] [email protected] 1 points 10 months ago

Fair, but sounds like that can be mitigated with 2FA

[–] [email protected] 1 points 10 months ago

Considering the bugs in this app, and considering that this is an Indian bank, I highly doubt it was 'written by a sane programmer'.