Thursday, September 22, 2016

Nordea: Then, we update the Swish – New Technology

Nordea slopes after the revelations about weaknesses in their Swish system. Now, the plan that the major banks have to send out an update that makes the names of the customers with a protected identity is no longer displayed in the Swish-app.

Earlier in the week could New Technology tell you that the flaws in the system that Nordea uses for the payment service Swish, that the bank threaten to expose sensitive information about the clients who live with a protected identity.

Read more: Swish can disclose the secret phone number

Shortly after New Technology news published went Nordea out with that you are planning to update their system to hide the names of the individuals in the vulnerable group.

What made you re-evaluate your earlier decision?

” I would not say that we reevaluated our decision. We have previously said that we are to analyze this approach. It is also important to point out that there are both advantages and disadvantages for the customers with a set-up where the recipient’s name is not visible. We have been clear with how the service works for users with a protected identity, but there is always a risk of misunderstanding. Now we take away the risk, ” says Anders Edlund, product manager Swish at Nordea, to New Technology.

Read more: Nordea crates on Swish

What have you got for the reactions?

– There are few of our clients who live with protected identities. Of them we have been in contact with some no problem that their name appears because they only use the service with relatives. Others have heard of after skriverierna and wondering why our solution is different from some other banks.

Swedbank, which does not show the names of the protected persons, retrieves the information from the Spar, the state’s classified. Why have you not the link also?

Nordea’s system already has the link to the Spar, however, do not have this built into the Nordea Swish solution. Instead, we have chosen to always show up with the name of the transfer is to be made, even if the person has a protected identity.

What was behind that decision?

” We wanted the customers to be able to ensure that their transfers went to the right person.

How will you change your system now?

– Simplified the changes mean that we no longer shows the names in the Swish of customers who have protected identity. Instead of name it will show the personal data protected.

When will these measures be in place?

” We have not set an exact timetable, but we expect that the measures will be in place by the end of October, says Anders Edlund.

Subscribe to the New Technology’s free newsletter!

LikeTweet

No comments:

Post a Comment