GSMArena.com GSMArena.com

Tip us

888k

156k
74k
1.1m

RSS

Log in

Login

I forgot my password
Sign up
  • Home
  • News
  • Reviews
  • Videos
  • Featured
  • Phone Finder
  • DealsNew
  • Tools
  • Coverage
  • Contact
ADVERTISEMENTS

Samsung talks the Pay vulnerability, says it's extremely difficult to pull off

  • Post your comment
  • Comments (18)

Vince 09 August, 2016

Samsung Android Misc

Samsung Pay was under fire after a security researcher Salvador Mendoza presented a way to attack the payment service at the security conference Defcon.

The attack works by intercepting the unique payment token that is generated with every transaction using the service. Mendoza demonstrated how tokens can be intercepted by using a wrist-mounted device.

Because the tokens are for single-use only and expire 24 hours after being generated, the attack requires the user to authenticate using a fingerprint, without actually completing the mobile payment.

Check out the 5-minute video, in which Mendoza demonstrates and explains how the vulnerability works.

Furthermore, Mendoza is claiming that he noticed patterns in the way Samsung generates said payment tokens. He explains that a hacker could hypothetically generate fake tokens of their own and steal money this way.

Naturally, Samsung was quick to respond to such claims and in a blog post explained that " Samsung Pay does not use the algorithm claimed in the Black Hat presentation to encrypt payment credentials."

What Samsung doesn't deny, however, that it is possible for an attacker to skim user's payment token and take advantage of them.

However the company notes that this is "extremely difficult" to pull off, since the attacker must be physically close to the target at the very moment they are making a purchase. Thus the risk has been categorized as an "acceptable" one, according to Samsung and the payment firms it works with.

Source • Source (2) | Via

Related articles
  • DxOMark gives the Samsung Galaxy S21 Ultra a lower score than the S20 Ultra DxOMark gives the Samsung Galaxy S21 Ultra a lower score than the S20 Ultra
  • Samsung Galaxy M12 is coming to India on March 11 with a surprise upgrade to a 90Hz screen Samsung Galaxy M12 is coming to India on March 11 with a surprise upgrade to a 90Hz screen
  • Samsung Galaxy A52 cameras detailed Samsung Galaxy A52 cameras detailed
  • Top 10 trending phones of week 8 Top 10 trending phones of week 8

Reader comments

r
  • refuses to update
  • qka
  • 14 Aug 2016

Id like to give my "two cents"...or is it tencent now? Inflation...go figure. Anyway, I am a college graduate...twice over btw...and am highly intellegent. THAT'S exactly why I DON'T UPDATE. Considering the charactter flaws that have come upon th...

  • Reply
A
  • Akinaro
  • J8}
  • 10 Aug 2016

Samsung is not alone here, most of today new paying methods are made in really weird and lame way(like 24h delay before it expire). No one care that they actually manage our money, they advertise it as a cool feature that you just "use" like it wou...

  • Reply
v
  • viveksubhash
  • utN
  • 10 Aug 2016

i don't understand...usual payment gateway instances expire in 3-5 min...24hrs???what are we dealing with?

  • Reply
  • Read all comments
  • Post your comment
Total reader comments: 18

ADVERTISEMENTS

Phone finder

  • Samsung
  • Apple
  • Huawei
  • Nokia
  • Sony
  • LG
  • HTC
  • Motorola
  • Lenovo
  • Xiaomi
  • Google
  • Honor
  • Oppo
  • Realme
  • OnePlus
  • vivo
  • Meizu
  • BlackBerry
  • Asus
  • Alcatel
  • ZTE
  • Microsoft
  • Vodafone
  • Energizer
  • Cat
  • Sharp
  • Micromax
  • Infinix
  • Ulefone
  • Tecno
  • BLU
  • Acer
  • Wiko
  • Panasonic
  • verykool
  • Plum

All brands Rumor mill

ADVERTISEMENTS

Top 10 by daily interest

  Device Daily hits  
1.Xiaomi Redmi K40 Pro+42,223
2.Samsung Galaxy A3228,476
3.Xiaomi Redmi K4026,249
4.Samsung Galaxy S21 Ultra 5G25,782
5.Samsung Galaxy F6225,243
6.Samsung Galaxy A1223,601
7.Xiaomi Redmi K40 Pro23,305
8.Xiaomi Mi 1121,270
9.Xiaomi Poco M319,239
10.Samsung Galaxy M6218,876
ADVERTISEMENTS

Home News Reviews Compare Coverage Glossary FAQ RSS feed Youtube Facebook Twitter Instagram

© 2000-2021 GSMArena.com Mobile version Android app Contact us Privacy Terms of use Change Ad Consent Do not sell my data