New answers tagged

0

It is important to remember that unlike many other protocols and methods for interconnection, SWIFT transactions are meant to run in a completely isolated environment (i.e. only over established, protected links between banks). Trusting the efficacy of the connection security might be a bad decision (failure of defense in depth), but at this point the ...


1

Among other things Swift is an co-operative organization of financial institutions who agree to using the same standardized messaging system for financial transactions. As such they publicly promote the use of ISO 20022 as their primary standard for messaging between financial institutions. That said each member may implement this standard using a very wide ...


1

The quote is short, but I think the author is trying to say that the router wasn't about ATM skimming, and not even about the ATM itself. It was a MITM for customers who used WiFi (personal devices). In this case, it was just a rogue AP that presented a fake certificate to users, and the users (or their poorly written apps) had to accept the fake ...


13

It's All About the Security Model We see reference to "Checking for jailbroken/rooted device" in nearly all Mobile Application Security Checklists (e.g OWASP). When comparing it to desktops or web browsers we have to keep in mind that they have different threat models. For example on desktop machines when designing an application we already know that there ...


6

PayPal is NOT asking for your bank details. It is Trustly that is asking for your bank details. Trustly is a Swedish company. It operates in Sweden, Finland, Poland, and a few other companies. They have an agreements with Paypal to provide options to top up your Paypal account (similar agreements are made with Skrill/Moneybookers). This is not a scam. Now ...


1

As far as I understood, the question is whether you would use your own, "real" account, a freshly created account or a test account provided by the bank. From my experience, any company wants to limit the potential impact when doing penetration tests. Therefore, they probably won't be happy if you start attacking their production systems. Just imagine what ...



Top 50 recent answers are included