SoylentNews is people
SoylentNews
Monzo admits to storing payment card PINs in internal logs
Monzo, a mobile-only bank operating in the UK, admitted today to storing payment card PINs inside internal logs.
The company is now notifying all impacted customers and urging users to change card PINs the next time they use a cash machine.
Monzo described the issue as a "bug" that occurred when Monzo customers used two specific features of their Monzo mobile apps -- namely the feature that reminds users of their card number and the feature for canceling standing orders.
When Monzo customers used one of these two features, they'd be asked to enter their account PIN, for authorization purposes, but unbeknowst to them, the PIN would also be logged inside Monzo's internal logs.
Monzo said these logs were encrypted and that only a few employees had access to the data stored inside.
Monzo worked over the weekend to purge logs of customer PINs
The company said it discovered the bug on Friday, August 2, and spent all weekend removing PIN numbers[*] from its internal logs.
As soon as it finished this operation, Monzo published a statement on its site on Monday morning, August 5.
The company also published an update for its mobile app on Saturday, August 3, so the apps won't send the account PIN code to Monzo servers anymore.
The company said that all users should update their mobile apps. Users who had their PINs recorded in Monzo's logs received email notifications. Users who didn't receive an email, were not impacted, the bank said. The number of affected users is around 480,000.
[*] PIN number: Personal Identification Number number. =)
See also: ZDnet.
(Score: 1, Insightful) by Anonymous Coward on Wednesday August 07 2019, @08:47PM (4 children)
til: PIN [wikipedia.org]
A pin is a device used for fastening objects or material together.
Pin or PIN may also refer to:
Contents
1 Awards, brooches, or fasteners
2 Computers and technology
3 Music and film
4 Sports and games
5 Other
6 See also
Awards, brooches, or fasteners
Award pin, recognising an achievement
Bobby pin or kirby grip or hair grip, a hairpin
Clevis pin, a three-piece fastener system
Collar pin, for a shirt collar
Drawing pin or thumbtack
Lapel pin, a small pin worn on clothing
Safety pin, pin which includes a simple spring mechanism and a clasp
Split pin or cotter pin, a fastener
Computers and technology
Personal identification number, to access a secured system
PIN, a Dutch debit card by currence
An image on Pinterest
PIN diode, a semiconductor diode
Pin, a short lead in electronics
Music and film
Pin (harp) a Cambodian harp
Pin (film), 1988, Canada
"Pin" (song), by the Yeah Yeah Yeahs, 2003
The Pin (comedy act), on BBC Radio 4
"The Pin", a song from the Goo Goo Dolls' album Boxes
Bridge pin, on a keyboard musical instrument
Sports and games
Pin (amateur wrestling), holding an opponent down
Pin (professional wrestling), wrestling move
Pin (bridge), a maneuver in the game of bridge
Pin (chess), when a defending chess piece cannot move without exposing a more valuable defending piece
Bowling pin, the target of the bowling ball in various bowling games
Gabriele Pin (born 1962), Italian footballer
Other
Pin, Haute-Saône, Haute-Saône, France
Police Information Notice, UK
Postal Index Number, postal code of locations in India
PIN Group, a German postal company
People in Need (Czech Republic), an organization
Paleontological Institute, Russian Academy of Sciences, Moscow, Russia
PIN proteins in plants
Progressive inflammatory neuropathy, a disease
Prostatic intraepithelial neoplasia, an abnormality of prostatic glands
Center pin, on railway vehicles
Dowel or dowel pin
Pin, half a firkin in English brewery cask units
See also
Hairpin (disambiguation)
Kingpin (disambiguation)
Pinning (disambiguation)
Pinhead (disambiguation)
(Score: 2, Disagree) by AthanasiusKircher on Thursday August 08 2019, @03:39AM (3 children)
Yes, precisely. OP's gripe is "kinda stupid" as it presumes that the word "pin" is unambiguous. "I forgot my pin today" could mean "I forgot my tie pin" or "I forgot my bowling pin" or "I forgot to make a certain chess move" or (when spoken in a Southern accent) "I forgot my writing implement that outputs ink" or many other things. Somehow, we still mostly understand each other in most common situations.
(Score: 2) by acid andy on Thursday August 08 2019, @09:25AM (2 children)
Not really. I dislike ambiguity. I only "mostly understand" other people when they provide sufficient context in cases where they use such ambiguous terms. The Southern "pin" for pen would really have me baffled and asking for them to elaborate.
If you accept that some context is needed to remove the potential for misunderstanding then do you not also accept that explicitly clarifying that the PIN is a number is reasonable and appropriate?
The reason it's stupid is that the term has clearly introduced controversy as well as the ambiguity, hence our disagreement.
If a cat has kittens, does a rat have rittens, a bat bittens and a mat mittens?
(Score: 2) by AthanasiusKircher on Friday August 09 2019, @07:22AM
A huge number of common English words have multiple divergent meanings. It's just how most languages work.
I don't think anything is "clearly introduced" about the supposed controversy or ambiguity. I have no problem with "PIN number" as an utterance. English is full of redundancies. Only pedants tend to worry about them; most of us actual people just use the language.
And I have never encountered a situation where anyone has used the term PIN but I thought they were referring to a pin. Maybe you have. But the word "pin" doesn't tend to come up in normal conversation that much for me, and when it does, it's usually in a specific context where the meaning is clear (referring to an item on clothing, referring to something being prepared for sewing, referring to bowling, referring to wrestling, etc.).
I mean, in a broad sense, I agree with you that it's better to introduce a new word rather than to tack on an unrelated meaning to a previously existing one. Sure, I'll agree with that as a vague general principle. But we have so many words with divergent meanings and the chances of ambiguity in this specific case seem so utterly remote that I'm not putting this on my list of linguistic problems to worry about.
(Score: 2) by AthanasiusKircher on Friday August 09 2019, @07:40AM
Oh, and by the way, I don't think of adding "number" to PIN is clarifying -- it's just a common phrase. When people don't realize what acronyms mean (or even that they are acronyms), they add words on that are theoretically unnecessary. Here's a list [nanday.com]. In most cases, there's no reason for the redundancy based on potential ambiguity. English speakers just naturally add these words to abbreviations in many situations, generally to clarify the general type of thing we're talking about for those who don't spend their lives memorizing the meaning of acronyms.