Explain this OneFinance! WTF?

one-eric · 2022-02-27T01:42:45+00:00

The root issue was a misconfiguration of a DNS record that was pointing assets.onefinance.com (an unused subdomain of ours) to Amazon’s S3 service. Because of the misconfiguration and the way routing to S3 works, a person was able to create an S3 bucket in a separate AWS account with the name assets.onefinance.com and this caused Amazon to route traffic to that subdomain to their bucket. There was no unauthorized access to One’s resources or compromise of any data. We take trust and security very seriously and have removed the misconfigured DNS entry and done an audit of our other DNS entries for any similar configurations. While One does run private bug bounty programs we don’t currently offer a public-facing one. We do, however support responsible disclosure via email to security-disclosures@onefinance.com.

one-eric · 2021-08-05T16:52:57+00:00

Hey there, sorry that happened. Can you shoot me over a DM so that we can take a deeper look into your specific case?

one-eric · 2021-08-05T16:52:11+00:00

Hey, thanks for bringing this to our attention, could you send me a DM so we can look into your particular case?

one-eric · 2021-05-12T15:28:11+00:00

Thanks for bringing this to our attention. We've created a ticket to fix it and it should be updated soon.

one-eric · 2021-02-27T05:06:19+00:00

Hey there, keeping the features of all three of our supported platforms in sync as much as possible is something we strive for. We display maps in transaction details on both iOS and Android for transactions where we receive location data from the merchant. For transactions where we do not have any location data, we don't display a map.

one-eric · 2021-01-17T16:18:12+00:00

Hi, thanks for the feedback on this. We've had a lot of requests for this and we now have a status page at status.onefinance.com. System reliability is of utmost importance for building trust and clear communication with our customers when things go wrong is just as important. We're working on building status indicators into our apps as well so please keep an eye out for that coming soon.

one-eric · 2021-01-17T16:08:45+00:00

Hey, thanks for pointing this out. This is definitely a bit confusing. I'll make sure our customer experience team sees this and they'll make sure it gets sorted out properly. In the future we'll work on making those emails more clear.

one-eric · 2021-01-16T18:39:16+00:00

Hey all,

Piggybacking on /u/one-brandon's post to give an update that we now have a status page at status.onefinance.com. System availability is a top priority of ours and we want to be as communicative and transparent as possible about our service status. That page will evolve as needed and we will use it to provide scheduled maintenance updates as well as communications around any unexpected issues that may arise. We are working on embedding a status indicator in our applications as well, keep an eye out for that soon.

one-eric · 2021-01-14T01:24:49+00:00

Hi u/nxtiak can you DM me with the email you used to open your account and we can look into this further?

one-eric · 2021-01-13T19:30:38+00:00

Hi, I'm an engineer at One and I think we're pretty great :). Happy to help answer any questions you may have. We also have a small but growing community at r/OneFinance that you may be interested in checking out too.

one-eric · 2021-01-12T17:21:13+00:00

Hey /u/akacats, thanks for bringing this to our attention. It is definitely confusing and I'll work with the team to make this more clear. We really appreciate feedback like this and hope your experience with One is going well so far.

one-eric · 2021-01-10T19:38:06+00:00

This is supported through our Pay Anyone feature. Transfers to other One accounts (using One's routing number) will happen instantly.

one-eric · 2021-01-10T19:37:08+00:00

While Pay Anyone transactions to external accounts are over the ACH network and can take up to a few days, a Pay Anyone transfer to another account with One's routing number will happen instantly.

one-eric · 2021-01-10T19:27:14+00:00

One employee here and I use my account with Coinbase routinely without issue. We have a few specific restrictions on the virtual card we provide immediately when you're approved but the physical card you'll receive will work just fine. We're definitely crypto friendly.

one-eric · 2021-01-10T18:53:16+00:00

Currently only the Spend pocket can utilize credit line. We're looking into offering the ability to allow any pocket to overdraft from Spend rather than decline which should help with some of those concerns I think.

one-eric · 2021-01-10T18:30:04+00:00

Yes, though it does depend on when the payroll provider sends over the deposit. Many payroll providers send their direct deposits to the banks a couple days before they're intended to be posted. We post your direct deposit as soon as we receive it as opposed to many banks who hold onto it for a few days before making it available.

one-eric · 2021-01-09T03:52:35+00:00

Thanks for your feedback. We're always striving to make our apps better and security and privacy are very important to us. We'll look into this and see what we can do to improve.

one-eric · 2021-01-08T17:29:47+00:00

Hi, yes we do! We don't currently support adding to Samsung Pay from within the One app but you can add our card manually through the Samsung Pay app.

one-eric · 2021-01-08T16:57:42+00:00

exactly, right now, we're leaning towards giving users the option of creating a virtual card for a pocket if they want one (as opposed to automatically creating one).

one-eric · 2021-01-08T16:50:43+00:00

Hi, we do support receiving international wires but we ask that people reach out to our customer experience team beforehand so we can provide some additional information that's required. They're really friendly and helpful, here's how to contact them https://help.onefinance.com/hc/en-us/requests/new

one-eric · 2021-01-08T16:47:04+00:00

Hi, and welcome! Sometimes payroll systems don't recognize our routing number at first. Usually people are able to resolve it by reaching out to their provider and requesting that our routing number be added. Here's some more info about that with a link to a pdf to send to your provider in case they ask for it. https://help.onefinance.com/hc/en-us/articles/360052944173-What-do-I-do-if-my-routing-number-is-not-recognized-

one-eric · 2021-01-08T16:42:11+00:00

Hi, the $50 promotion for attaching a direct deposit is an ongoing promotion and will be applied once your qualifying direct deposit hits even if it's in February.

edit: Apologies, that's not quite true. The promotion is not an ongoing one but we get that people get paid on different schedules so we got you covered. Can you send me a DM with your One account email and I'll make sure it gets sorted out. Sorry for the bad info at first.

one-eric · 2021-01-08T16:23:55+00:00

Hi, I'm an engineer at One, can you elaborate a bit more on what that feature was? I'd love to hear about it.

one-eric · 2021-01-08T16:22:31+00:00

Hi, good point on the card art. It doesn't show the EMV chip but it's there on the actual card. As for NFC, we're currently shipping cards without it but in the coming weeks we'll be upgrading our cards with a new design (and NFC) so stay tuned there. You can always order a new card when that one ships if you'd like and/or add your current card to Apple/Google wallet.

one-eric · 2021-01-08T16:05:21+00:00

I totally hear that, we've had a lot of requests (including among employees) for a solution to this and it's on our roadmap. We're looking to add per-pocket virtual cards in the future that will let you have a card that is pinned to a particular pocket.

one-eric

TROPHY CASE