Android app of the new bank Bunq, which is seen as the ‘WhatsApp under the banks’ , identity details of customers save on unsecured.
According to research by Geert de Graaf where about NIS message. During the registration process for Bunq ask the bank for a photo of an identification card, which can create and send the user from the app directly.
The picture is sent to the servers Bunq but remains unencrypted on the are Android device. Not in the photo gallery, but in the folder of the app. This allows other apps also have access to a copy. It is customary that the copy immediately after the transfer is removed from the smartphone.
Ali Niknam, director of Bunq confirms the error. “The photos should actually be temporarily saved, but they are not deleted by mistake,” said Niknam. The company today is rolling out an update to the Android app that addresses this issue.
RTL Z / Daniel Verlaan
No comments:
Post a Comment