<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Ivan Kuznetsov &#187; Sampo</title>
	<atom:link href="http://www.ivankuznetsov.com/tag/sampo/feed" rel="self" type="application/rss+xml" />
	<link>http://www.ivankuznetsov.com</link>
	<description>Entrepreneur, Ruby on Rails and Ubuntu fanatic, consultant</description>
	<lastBuildDate>Fri, 01 Jul 2011 22:03:56 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
		<item>
		<title>Sampo bank software upgrade, Ubuntu and beta culture</title>
		<link>http://www.ivankuznetsov.com/2008/04/sampo-bank-software-upgrade-ubuntu-and-beta-culture.html</link>
		<comments>http://www.ivankuznetsov.com/2008/04/sampo-bank-software-upgrade-ubuntu-and-beta-culture.html#comments</comments>
		<pubDate>Sun, 27 Apr 2008 13:13:02 +0000</pubDate>
		<dc:creator>Ivan Kuznetsov</dc:creator>
				<category><![CDATA[Current Affairs]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[java]]></category>
		<category><![CDATA[Sampo]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://www.ivankuznetsov.com/?p=102</guid>
		<description><![CDATA[Even if you are not Sampo bank&#8217;s customer, but live in Finland, you have most probably heard by now about continuous problems Sampo had with their web-bank system. When Sampo launched the new system this Easter, they took into use Java-based authentication system. Of course it didn&#8217;t work in my Ubuntu 7.10, but after removing [...]]]></description>
			<content:encoded><![CDATA[<p><img class="alignleft size-full wp-image-103" title="Sampo Ubuntu error" src="http://www.ivankuznetsov.com/wp-content/uploads/sampoubuntu.png" alt="" width="298" height="147" />Even if you are not Sampo bank&#8217;s customer, but live in Finland, you have most probably heard by now about <a href="http://www.hs.fi/english/article/Sampo+Bank+problems+continue+-+cards+fail+again+on+Wednesday/1135235467803">continuous problems</a> <a href="http://www.sampopankki.fi">Sampo</a> had with their web-bank system.</p>
<p>When Sampo <a href="http://www.hs.fi/english/article/Serious+problems+with+launch+of+new+online+service+of+Sampo+Bank/1135235064450">launched the new system</a> this Easter, they took into use Java-based authentication system. Of course it didn&#8217;t work in my <a href="http://www.ubuntu.com">Ubuntu</a> 7.10, but after removing Open JDK and installing latest Sun JDK it started functioning again &#8211; at least log in worked. This Java solution <a href="http://blogit.tietokone.fi/tietojakoneesta/?p=345">raised a lot of concerns</a> in internet community.</p>
<p><span id="more-102"></span></p>
<p>After upgrade to Ubuntu 8.04 that has Firefox 3.0b5 as default browser, Sampo web-bank Java login stopped working again. This time installing latest JRE didn&#8217;t help. Hardy Heron (Ubuntu 8.04) contains JRE 1.6.0_06-b02 and it fails on the second security code request during login process. (Remarkably, Sun itself offers only 1.6.0_05 version for Linux). Solutions proposed in <a href="http://forum.ubuntu-fi.org/index.php?topic=16982.msg125906">Finnish Ubuntu discussion forum</a> (tweaking plugins) didn&#8217;t work for me either.</p>
<p>What worked was replacing JRE 1.6 with an older version 1.5:</p>
<p><code>$sudo apt-get remove sun-java6-bin sun-java6-fonts sun-java6-jre sun-java6-plugin openjdk-6-jre openjdk-6-jre-headless openjdk-6-jre-lib</code></p>
<p>$sudo apt-get install sun-java5-bin sun-java5-fonts sun-java5-jre sun-java5-plugin</p>
<p>Then I ran</p>
<p><code>$sudo update-alternatives --config java</code></p>
<p>command to make sure correct JRE was selected as default.</p>
<p>While struggling with this issue I tried to check Sampo&#8217;s technical support pages. There was a nice &#8220;<a href="https://www.sampopankki.fi/en-fi/Personal/eBanking/Support/CheckPC/Pages/TarkistaTietokoneesi.aspx">Check your computer page</a>&#8221; that kindly informed me that my operating system is Linux and &#8220;You may be able to run eBanking, but your operating system is not supported by Customer Support.&#8221;</p>
<p>This is really frustrating. 14% of the readers of this blog use Linux. On regular sites that I maintain this figure is from 7% to 10%. Sampo caused a lot of grief to its customers, me including, with this software system upgrade. Even after they <a href="http://www.yle.fi/news/id88848.html">promised to waive four months&#8217; worth of service charges</a> I&#8217;m still not sure it is going to be enough to keep all their customers.</p>
<p>I&#8217;ve experienced quite a lot of problems by far &#8211; non-\0-terminated strings in UI, transactions with no explanations that I don&#8217;t remember authorising, transactions in our web shop that were reported as failed, although money were withdrawn from customer&#8217;s accounts, simple web-bank downtimes with HTTP 503 and the latest one is my credit card &#8211; Sampo claims that I don&#8217;t owe them anything &#8211; probably it is one of the Monopoly&#8217;s famous &#8220;Bank error in your favour, collect $200&#8243; cases.</p>
<p>Beta culture seems to be spreading from internet startups to bank systems (although in this case I would be more inclined to say that this was a huge screw up on Danske Bank IT department&#8217;s part). I&#8217;m not sure I like it. Gmail beta, Flickr beta, but Sampo Bank beta? It&#8217;s definitely fun to participate in debugging of the new web service, but not when it deals with your real money.</p>
<p>This case bring interesting thoughts on how much we trust online services and what is the pain level when we say &#8220;that&#8217;s enough, I&#8217;m leaving&#8221;. Is it the same for data banking as for traditional banking. Would you trust your bank to keep your family photo archive or your computer backups? Is it any safer than Flickr/Google Documents? And the other way around &#8211; if you trust your data to Google or Yahoo, would you trust them with your money?</p>
<p><a class="a2a_dd a2a_target addtoany_share_save" href="http://www.addtoany.com/share_save#url=http%3A%2F%2Fwww.ivankuznetsov.com%2F2008%2F04%2Fsampo-bank-software-upgrade-ubuntu-and-beta-culture.html&amp;title=Sampo%20bank%20software%20upgrade%2C%20Ubuntu%20and%20beta%20culture" id="wpa2a_2"><img src="http://www.ivankuznetsov.com/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share"/></a></p>]]></content:encoded>
			<wfw:commentRss>http://www.ivankuznetsov.com/2008/04/sampo-bank-software-upgrade-ubuntu-and-beta-culture.html/feed</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
	</channel>
</rss>

