I had a tangential experience to this phenomenon lately. I moved continents a few years ago. Eventually I had to switch my Play Store country to where I moved. That restricted my access to certain versions of apps but my downloaded apps continued to function anyway.
Then, a few months ago, I finally bought a new phone. I quickly found out that there was no way I could get this one banking app from my home country on the new phone (other than switching my country setting again, which isn't worth the potential hassle right now). Fortunately, I could still do online banking with on my browser...right?
I try to login to my online banking. They say they will send me an OTP on my registered mobile number. Makes sense, and, thanks to the wonders of roaming, I will be able to receive it. Except...instead of just sending me the actual OTP like any sane platform would do, I had to first confirm that I was, indeed, trying to sign-in to online banking by replying "YES" to their SMS prompt. And due to the wonders of SMS roaming protocol, though I could receive their messages, I simply could not reply to them no matter which gods I invoke.
Security design by committee. I curse the manager who though this was a necessary and valuable addition to the whole OTP scheme.
It's not so much a "convenience tax" as in the article but, I guess, a penalty for moving countries. I have no choice now but simply to just settle this when I go on vacation to my home country. There is probably no convenient resolution to this even when I am in the correct geospace.
PS. I have two banks from home country and I was able to install the other bank's app in my new phone without a hitch. I try to avoid cynicism but this simply has the stink of Managerial Software Engineering Best Practices all over it.
Then, a few months ago, I finally bought a new phone. I quickly found out that there was no way I could get this one banking app from my home country on the new phone (other than switching my country setting again, which isn't worth the potential hassle right now). Fortunately, I could still do online banking with on my browser...right?
I try to login to my online banking. They say they will send me an OTP on my registered mobile number. Makes sense, and, thanks to the wonders of roaming, I will be able to receive it. Except...instead of just sending me the actual OTP like any sane platform would do, I had to first confirm that I was, indeed, trying to sign-in to online banking by replying "YES" to their SMS prompt. And due to the wonders of SMS roaming protocol, though I could receive their messages, I simply could not reply to them no matter which gods I invoke.
Security design by committee. I curse the manager who though this was a necessary and valuable addition to the whole OTP scheme.
It's not so much a "convenience tax" as in the article but, I guess, a penalty for moving countries. I have no choice now but simply to just settle this when I go on vacation to my home country. There is probably no convenient resolution to this even when I am in the correct geospace.
PS. I have two banks from home country and I was able to install the other bank's app in my new phone without a hitch. I try to avoid cynicism but this simply has the stink of Managerial Software Engineering Best Practices all over it.