AIB Internet Banking

Dmz1984

Hi,

For those of you who have been wanting this for ages,
I'm currently developing it as an FYP proposal.

https://market.android.com/details?id=ie.aib

Should receive good updates over the next year or so

G'luck
Dave.

Baldie

"NOT AN OFFICIAL AIB APPLICATION"

Oh, I'll just hand over my bank details shall I?? :rolleyes:

Dmz1984

and i want to go to jail for 10 years

Solair

AIB's online banking actually works quite well using just the Android web browser.

It's a bit fiddly, but no offense to the OP, but I am not divulging my AIB online banking details to anyone other than AIB's online banking website.

AFAIK, it's actually a breech of the AIB T&Cs to divulge your security codes or PINs to third parties.

Dmz1984

Thats great

just as a side note, i know where your all coming from..

this is not what the thread is for.

ye have made your points. - 'nuff said'

Solair

Eh, excuse me!

The points being raised on this thread are very legitimate security concerns.

The thread is about the app, and I don't think anyone has gone OT!

Divulging your log-in details to a third party can render your fraud protection nul and void at the bank because you willingly gave your details to someone else i.e. they were not stolen.

While I am not for a moment doubting that you are 100% legitimately developing an app to make everyone's lives easier, I am not entirely sure how safe my data is when I use this app or how it is handled etc.

There's a lot more at risk with access to bank accounts than say checking someone's mobile phone account balance or reading their ESB bill. The site can actually authorise transactions.

'nuff said!

FastFullBack

Sorry, no way am I using this app. Would love an AIB app but not going to use one that aint official.

denlaw

Is there an iPhone app for Aib , can't seem to find one ..?

Dmz1984

The application interacts with the AIB website and
uses their security implementation, as if you were using a web browser

you use Google chrome, Firefox, Internet Explorer etc,that does exactly the same thing.
you go into net cafes and probably have checked your balance,
you use your friends computers ....

with windows and god knows what spy ware etc installed

your argument is futile, to state the fact that nothing is secure.

what i can guarantee you is that there is no logging,
happening, as i am not crazy, i don't fancy going to Jail

So yes excuse yourself

Solair

Nope, there are no official apps for AIB at present.

However, you can, fiddly and all as it is, access AIB through the iPhone browser too.

The only Irish bank that I am aware of that has an iPhone app at present is Ulster Bank.

denlaw

FastFullBack wrote: »

Sorry, no way am I using this app. Would love an AIB app but not going to use one that aint official.

Just seen this ...

Dmz1984

denlaw wrote: »

Is there an iPhone app for Aib , can't seem to find one ..?

There was one years ago, but it stopped working,
seemingly the developer stops developing it

Solair

Well, all I'll say is that banks' security teams really don't like any third party software like this.

While I'm not saying that your intentions are malicious in anyway, they do not like anything coming between their system and the end user.

Why don't you approach AIB to develop an android app officially?

srsly78

OP doesn't seem to realise that he his now a vulnerability in the banks security.

Hackers attack the OP, and grab his android signing key.
Hackers then push an update for this app with malicious code.

Who gets blamed?

There is already a "cease & desist" letter on it's way from AIB to Google I bet. App will be pulled.

Solair

I would assume so.

Quite honestly, I think while it's an interesting idea and would be convenient for end users, it's going to end in a rather officious e-mail / letter / call from AIB's legal affairs unit.

OP: you'd be better off putting time into developing something less legally risky!

Kenny Logins

I would use this if it was an official app, looks good.

Mr E

So you have no permission from AIB for this?
Wow..... wide berth, I'm sorry.

Have you tried contacting AIB to see if they'll test, approve and fully endorse it? Sounds like you've done 90% of the work they need to get an app in the marketplace.

Dmz1984

i don't need permission from AIB to do it.

Only legal way they can have it removed is because of the use of their images,
which i am removing right now

not that google would probably take it down anyway

srsly78

They will take it down if it has AIB in the name, because it makes it look official (even if in the description you state that it's not). And again: you are exposing yourself to massive liability.

anoble66

I am also pretty sure they can and will stop you. Your interacting with their secure website in a way in which it was not intended, without their permission.

srsly78

There is nothing wrong with his interaction, he is right in that "it's just like your firefox/IE". The problem is the bank cannot guarantee that he will not turn rogue one day, or get hacked. He is outside the banks control.

OP if you REALLY want your app to be available to everyone you should give the code to AIB and let them publish it. Yes they are **** and probably won't pay you. Yes they probably won't even publish it if you give them a polished working version, coz it will take 5 years to go through their various internal audits :roll: It's not a perfect world we live in unfortunately.

hmmm

Give the bank a break, they presumably wouldn't want customers to download unofficial apps (however well intentioned) for obvious reasons. I imagine AIB will be looking to have this removed and quickly, as a customer I'd expect nothing less.

The Corinthian

Can AIB do something about this? Yes, to begin with they can change their Web site slightly to break the screen scraping functionality that is being employed.

Legally, there is nothing stopping someone writing such an app as long as they do not attempt to pass themselves off as being associated with AIB. And herein is Dmz1984's problem; while he technically makes no claims to be associated with them he uses the AIB logo (a registered trade mark). As such, there could be a legal case against him.

Now, would I use this app? Not on your life - who in their right mind would give their bank log-in details to a stranger on the Interweb.

Dmz1984, I suggest you take it down and seek some legal advice before progressing.

The Corinthian

I'll also have to note that with the plethora of armature apps written for Irish services (Dublin bus, rail, banks, etc), it really does show up many of these organizations are being out of touch with the current market.

Dmz1984

LOL, i'm cracking up over here

keep it coming

Tuesday 7th Of June.. Let see how long before they take it down.

Who knows, something good might come of it!

Dmz1984

The Corinthian wrote: »

Can AIB do something about this? Yes, to begin with they can change their Web site slightly to break the screen scraping functionality that is being employed.

Legally, there is nothing stopping someone writing such an app as long as they do not attempt to pass themselves off as being associated with AIB. And herein is Dmz1984's problem; while he technically makes no claims to be associated with them he uses the AIB logo (a registered trade mark). As such, there could be a legal case against him.

Now, would I use this app? Not on your life - who in their right mind would give their bank log-in details to a stranger on the Interweb.

Dmz1984, I suggest you take it down and seek some legal advice before progressing.

first decent reply ...

Dmz1984

anoble66

the same can be said for anyone of the multiple web browsers on the market,

whats stopping firefox from harvesting credit card numbers... etc.

The Corinthian

Dmz1984 wrote: »

the same can be said for anyone of the multiple web browsers on the market,

whats stopping firefox from harvesting credit card numbers... etc.

Because AIB will have tested it on Firefox to check for this. They are ultimately liable for such data harvesting if they have dropped the ball on security - check their T&C as they'll often list what browsers have been tested.

Indeed, what guarantee do you offer that data is transmitted or stored locally securely? Are you using a proxy for the screen scraping (if so this needs to be secure)? All of these are things that make you legally and financially liable.

As much as I think it is a good app and idea, I really think you are potentially on very thin ground legally.

Dmz1984

( thin legal ground ) completely, no one is denying it!

I'm hoping the worst case scenario, is that they request google to remove it...

The Corinthian

Dmz1984 wrote: »

( thin legal ground ) completely, no one is denying it!

You just admitted legal liability in public. Your ground just got thinner.

Seriously, take it down and get some legal advice before putting it back up again.

I'm closing this thread now and I'm doing you a favour in doing so.