QUOTE(!@#$%^ @ Jul 16 2020, 11:03 AM)
yup, script on auto solve captcha. and yes, there is still TAC as one of the security feature. but doesn't mean ID and password should be given out right? that's also another layer of security. also, many ppl happen to use the same id and password for their online accounts. some unfortunate person may fall for it.
just search regarding BP, u will see many got cheated as well despite many layers of security and the need for TAC.
so yes, do not give out ur id and password ya.
Yes, id and password is important, but not as important as TAC now.
Actually the automated script is just JavaScript that executed on client side, that anyone can take a glance, it was very short, knowing a bit programming should know what it does.
Not saying it won't cause security vulnerability at all, but user that may falls for a fake script will rather get exposed to security vulnerability on using pirated software, browsing random websites, or one of the online service providers leaked their database on username and password etc. I don't think pnb would take this (fake script) as a reason to change their top up game.
Financial organizations now had been assuming everyone's id and password is not safe, thus introducing TAC, or even tap on app to approve stuff now, because they found security vulnerability (mostly victim send the TAC to scammers) on TAC few years ago.