One Article Review
| Source |  Graham Cluley |
|---|---|
| Identifiant | 4196 |
| Date de publication | 2016-07-17 08:27:56 (vue: 2016-07-17 08:27:56) |
| Titre | How you could steal money from Instagram, Microsoft and Google with help from a premium rate phone number |
| Texte | Researcher Arne Swinnen found an ingenious way to make money from the likes of Google, Microsoft and Instagram - getting their two-factor authentication registration schemes to call a premium rate phone number:"They all offer services to supply users with a token via a computer-voiced phone call, but neglected to properly verify whether supplied phone numbers were legitimate, non-premium numbers. This allowed a dedicated attacker to steal thousands of EUR/USD/GBP/... Microsoft was exceptionally vulnerable to mass exploitation by supporting virtually unlimited concurrent calls to one premium number"Clever!Swinnen told the tech companies concerned about the issue. Despite the fact that it was clear that no customer data was being put at risk through the technique (the actual potential damage was for the tech companies to lose some cash), the researcher was awarded $2000 and $500 by Instagram's and Google's respective bug bounties.You can learn more in Arne Swinnen's blog post. |
| Envoyé | Oui |
| Condensat | $2000 $500 about actual all allowed arne attacker authentication awarded being blog bounties bug but call calls can cash clear clever companies computer concerned concurrent could customer damage data dedicated despite eur/usd/gbp/ exceptionally exploitation fact factor found from getting google help how ingenious instagram issue learn legitimate likes lose make mass microsoft money more neglected non number number: numbers offer one phone post potential premium properly put rate registration researcher respective risk schemes services some steal supplied supply supporting swinnen tech technique thousands through token told two unlimited users verify virtually voiced vulnerable way whether |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.