Android user here, still does not have go+ features. Only limited to ios now?

The latest duitnow promo.: Change duitnow phone ID to TnG (rm3 cb) and transfer rm50 (rm3 cb).. I only got 0.3% duitnow cb (rm0.15).

Weird.

Since no one provided a good answer on this concern so far...

The industry practice is to "salt" and "hash" passwords before saving them.

In laymen terms, hashing is a (basically) one-way transformation of any text to a fixed length encrypted text.



"ABC" will always transform into b5d4045c3f466fa91fe2cc6abe79232a1a57cdf104f7a26e716e0a1e2789df78 via SHA256
"12345" will always transform into 5994471abb01112afcc18159f6cc74b4f511b99806da59b3caf5a9c173cacfc5 via SHA256

But it's nearly computationally impossible to turn b5d4045c3f466fa91fe2cc6abe79232a1a57cdf104f7a26e716e0a1e2789df78 back into "ABC"

So, by saving b5d4045c3f466fa91fe2cc6abe79232a1a57cdf104f7a26e716e0a1e2789df78 instead of "ABC", even if TnG staff has full access to the database, they can't actually know your password/pin, all they see is a useless line of text. (you can't feed this into a 6 digit field, can't you?  )

---

But what if the hacker have a list of hashed password? Let's say he generated a list of hash based on common passwords, he already knows
"ABC" will always transform into b5d4045c3f466fa91fe2cc6abe79232a1a57cdf104f7a26e716e0a1e2789df78 via SHA256,
so he just search for b5d4045c3f466fa91fe2cc6abe79232a1a57cdf104f7a26e716e0a1e2789df78 and he will know that account password is "ABC".

This is where salting comes in.

We usually will add some arbitrary characters to all passwords to cause the hash to change. e.g. if your password is ABC, instead of hashing ABC, we "add salt":

TnGDBPassword+ABC = dad7b71dd5d586de059e5d4d2a9a18e2913ac095c8082b78f351fae5b701922e
TnGDBPassword+12345 = 7c18152350445b19e32792348bb0e47896f2a057155cecd19790e264cdb6c3ca

Now the hacker can't just use the password list he have, because he shouldn't know what we salted the password with. (He'll need access to the source code)

---

By practicing these two practices, the person who can find out your TnG password has to have access to source code and database at the same time, this is an extremely privilege position - your typical CS staff most definitely do not have this level of access.

Now whether TnG actually practice this, I am not sure, but given the app is out sourced, it's most likely yes, they do.
Those hacked TnG account is simply due to user carelessness for using extremely obvious and simple pin - it's literally the first thing people would try on a 6 digit password.

Hope that answers some concern on basic password security! I am happy to answer anything I can.

Mine don't have. Only GO+ and GOpinjam. Android ver.

launching today?

me oso on android, maybe need to update app first.

yes, it follow the NAV u bought and the current NAV you have. So eventually when you redeem and the NAV is lower than what you bought, you might get negative or losses.

if you are looking for a long term invest, it should be in their avg projected return which is around 2.71% but if you want to get more you have to buy low sell high

https://www.principal.com.my/en/immfd

you can check here, it should be quite consistently going up as it is MMF, based on 9/6/2022 RM1 and yesterday 4/7/2022, after 27 days up 0.19%, which means 0.19 X 365 / 27 = 2.569% pa

just for curiousity, the purpose of reload using cc and then withdraw it back to maybank is to get some advance cash?

or to maximize the credit card ewallet benefit?

Long story summarized in the last few words

So u no longer cash in n cash out?

Did y'all bind ur cc to the ewallet? Mayb kena banned easier because of this?

how u manage to get it unblocked?

u were blocked coz u top up with CC and then cash out?

More like they lied because this month return even lower then 2.55%. Even tng go probably higher then tng invest.

They probably put 3% because they realize that other money markets are giving higher rates.

I am going to put with versa. Sure other money markets are at least more honest then them

Really cannot stand their dishonesty. At least if they give higher rates this month then they can claim their projected return is 3.00%.

https://www.principal.com.my/en/immfd

For me no big deal just that if I left it in tng go plus, would have gotten more. And they still continue with their bullying tactics.

Ppl still praise them for that

Regret not putting into kdi. Now will just put into versa.

But ppl will still continue using tng invest even after ppl complaint

Give only 2.55% previous month still go advertise up to 2.8%. Even lower this month and say give 3%. Really should get boycott.

I will definitely check rates next month but can almost guarantee will be less then 3% but of course ppl will claim is fees etc.

How ppl can see nothing wrong in what they do just beats me.

And like you said, take so long to withdraw. Other place only 1 day. Those ppl who started this go invest never use their brain but ppl will still put inside.

i think use credit card withdraw around 500-1000 to TNG ewallet every month still ok. Avoid withdrawing to bank often too.

big amounts like 3-5k... then when need cash keep withdraw to bank account then not ok lar..

just guessing.. hope no one got ban coz of this practice.