28 May 2015

Beyond TEDIPAY

Alexander Peschkoff - TEDIPAY

106Posts 408,157Views 493Comments

Innovation in Financial Services

A discussion of trends in innovation management within financial institutions, and the key processes, technology and cultural shifts driving innovation.

NatWest throws in the towel. Who is next?

08 October 2012  |  3787 views  |  0

In June this year, NatWest and RBS proudly announced the arrival of the new era of cardless ATM withdrawals.

In my comment on that page, I explained that any OS-only financial solution is "almost secure" (which is similar in concept to being "almost pregnant").

There is no "secure" without "secure element". App-based solutions are fully exposed to all types of fraud, including - most importantly - "zero day" attacks.

When I wrote that "the next question is how long will it take for it to be hacked" I was thinking to myself that NatWest's cardless ATM platform would be compromised by busy Christmas period. It seems they finally understood that too and are now pulling the plug on that service, just over three months after its launch.

I am reliably informed that field tests at NatWest lasted for at least six months - yet, Ross Anderson's team at Cambridge University would have exposed security holes in the NatWest's flawed architecture in half a day.

Most importantly, cardless ATM service has been offered by NatWest for years (!). It was only when they moved it to a "naked" mobile platform that things got interesting for the attackers. NatWest were lucky not to see even the tip of that iceberg that could have turned the bank into the Titanic.

The question now is who will be the next victim. I'll share my thoughts on that soon.

Are cardless ATM withdrawals a great idea? Absolutely! That convenient approach allows, in particular, to move all existing ATMs from the "steal my money quick" magnetic stripe to a platform whose security beats EMV ("Chip and PIN") hands down. In matter of days. Worldwide. If done right.

Watch this space...

Blog updated: 21 May 2015 14:24:17
TagsMobile & onlinePayments

Comments: (1)

Alexander Peschkoff - TEDIPAY - London | 08 October, 2012, 13:43 As for cardless ATMs, this is the shape of things to come: http://thefinanser.co.uk/fsclub/2012/10/the-future-of-the-cash-machine-.html
Be the first to give this comment the thumbs up 0 thumb ups! (Log in to thumb up)
Comment on this story (membership required)
Log in to receive notifications when someone posts a comment

Latest posts from Alexander

Seven stupid things about Apple Watch

12 April 2015  |  2637 views  |  2  |  Recommends 0 TagsMobile & onlineInnovationGroupInnovation in Financial Services

What's up, doc?!

13 February 2015  |  1453 views  |  1  |  Recommends 0 TagsMobile & onlineInnovationGroupInnovation in Financial Services

How Barclays 'borrowed' my children's money

03 December 2014  |  2359 views  |  3  |  Recommends 0 TagsMobile & onlineRetail bankingGroupInnovation in Financial Services

To those who still don't get it...

09 September 2014  |  2941 views  |  0  |  Recommends 1 TagsMobile & onlinePaymentsGroupInnovation in Financial Services

Cash is king, but of which kingdom?..

09 June 2014  |  3557 views  |  2  |  Recommends 1 TagsMobile & onlinePaymentsGroupInnovation in Financial Services

Alexander's profile

job title CEO
location London
member since 2012
Summary profile See full profile »
I am the co-founder and CEO of TEDIPAY, the company that is bringing to the market a game-changing platform for secure mobile transactions.

Alexander's expertise

What Alexander reads
Alexander writes about

Who's commenting on Alexander's posts

Dave Sanderson
Robert Avery
Lu Zurawski
Chetan Ghadge
Paul Love
Brett King