Authorization in Alpha Mobile (under iOS) 10 hours after entering the password
A couple of days ago I asked a question about clearing the password field in iOS. Having received an affirmative answer, I decided to write in more detail.
Last Thursday, Alfa-Bank underwent some technical work, during which some services were unavailable. Including Alfa Mobile - an online banking service for mobile devices (in my case, iOS). I did not know about the technical work and tried to log into Alpha Mobile. The application gave an error message about connecting to the server. Ok, I climb into the Internet, find Alpha's twitter and see a message there about technical work. At the same time, I naturally do not close the Alpha-Mobile application, but simply minimize it, as it usually happens with most iOS applications.
At noon the next day I needed to top up the balance of my cell phone. I start Alpha Mobile and see the password entered 10 hours ago. I don’t believe my eyes, click “Enter” and really enter account management.
')
The situation is easy to simulate with the help of "Avi-regime". To run the program you need internet. Without it, Alpha Mobile does not start. After the launch of the program, we activate “Aviation mode” and try to log in - the program gives a connection error to the server, since there is no Internet. We turn off the program, deactivate “Airplane Mode”, open the program - the password remains in its place.
At first I did not know how to inform the bank about the problem. I called them on the hotline. The report on such a problem the bank could not properly handle. The girl operator simply suggested that I turn off the Alpha Mobile service in order to avoid the possibility of unauthorized access to the accounts. They probably treat headaches there by cutting off the head :) Then I found in the program itself the opportunity to write a letter to the bank (yeah, it’s very convenient to write from an iPhone) and told them the essence of the problem.
Perhaps it was not worth talking about it all here before fixing the problem. But the fact is that the same “delayed” access is possible, for example, to Yandex.Money. Surely there will be other similar programs that do not reset the password field during an unsuccessful attempt to connect to the server.
With mobile access to money, the Internet may disappear at the wrong time, for example, in the subway. And if the iPhone / iPad was taken away, then with the knowledge of such nuances and good luck, it can also take money away, including from My Alpha deposit account.
Last Thursday, Alfa-Bank underwent some technical work, during which some services were unavailable. Including Alfa Mobile - an online banking service for mobile devices (in my case, iOS). I did not know about the technical work and tried to log into Alpha Mobile. The application gave an error message about connecting to the server. Ok, I climb into the Internet, find Alpha's twitter and see a message there about technical work. At the same time, I naturally do not close the Alpha-Mobile application, but simply minimize it, as it usually happens with most iOS applications.
At noon the next day I needed to top up the balance of my cell phone. I start Alpha Mobile and see the password entered 10 hours ago. I don’t believe my eyes, click “Enter” and really enter account management.
')
The situation is easy to simulate with the help of "Avi-regime". To run the program you need internet. Without it, Alpha Mobile does not start. After the launch of the program, we activate “Aviation mode” and try to log in - the program gives a connection error to the server, since there is no Internet. We turn off the program, deactivate “Airplane Mode”, open the program - the password remains in its place.
At first I did not know how to inform the bank about the problem. I called them on the hotline. The report on such a problem the bank could not properly handle. The girl operator simply suggested that I turn off the Alpha Mobile service in order to avoid the possibility of unauthorized access to the accounts. They probably treat headaches there by cutting off the head :) Then I found in the program itself the opportunity to write a letter to the bank (yeah, it’s very convenient to write from an iPhone) and told them the essence of the problem.
Perhaps it was not worth talking about it all here before fixing the problem. But the fact is that the same “delayed” access is possible, for example, to Yandex.Money. Surely there will be other similar programs that do not reset the password field during an unsuccessful attempt to connect to the server.
With mobile access to money, the Internet may disappear at the wrong time, for example, in the subway. And if the iPhone / iPad was taken away, then with the knowledge of such nuances and good luck, it can also take money away, including from My Alpha deposit account.
Source: https://habr.com/ru/post/144253/
All Articles