#KiwiBank internet banking now comes with DataFarming scripts from 4 different third parties;
* dynatrace.io
* googletagmanager.com
* launchdarkly.com
* qualitrics.com
That's on top of the third-party scripts for the internal notifications, provided by atomic.io.
That's on top of the fact that source code for KB apps is not available to customers under a free license, allowing them to rely on security-by-obscurity instead of security-by-design backed up by peer review.
(1/3)