summaryrefslogtreecommitdiff
path: root/financial-news/2014-09-10.inc
diff options
context:
space:
mode:
authorChristian Grothoff <christian@grothoff.org>2017-02-08 14:18:10 +0100
committerChristian Grothoff <christian@grothoff.org>2017-02-10 16:53:52 +0100
commit706be64b63b06d422e48f64ff381e81efce61f24 (patch)
tree0fb9154961adbbf1b81e75a831682e5d776dddd9 /financial-news/2014-09-10.inc
parent7b58a49de8bcf802ee6cd7114c485cbe736151f7 (diff)
downloadwww-706be64b63b06d422e48f64ff381e81efce61f24.tar.gz
www-706be64b63b06d422e48f64ff381e81efce61f24.tar.bz2
www-706be64b63b06d422e48f64ff381e81efce61f24.zip
reorganizing financial news
Diffstat (limited to 'financial-news/2014-09-10.inc')
-rw-r--r--financial-news/2014-09-10.inc17
1 files changed, 17 insertions, 0 deletions
diff --git a/financial-news/2014-09-10.inc b/financial-news/2014-09-10.inc
new file mode 100644
index 00000000..2b886bc9
--- /dev/null
+++ b/financial-news/2014-09-10.inc
@@ -0,0 +1,17 @@
+ <h3>10-9-2014: PayPal accounts hacked with a click</h3>
+ <p>Yasser Ali reports a now patched vulnerability in PayPal that would
+ have allowed him to reset other user's passwords and take over their
+ accounts. This is unlikely to be the last vulnerability found in
+ account-based payment systems.<br>
+ In Taler, customers do not have accounts with usernames, passwords
+ or associated e-mail addresses. Instead, Taler uses reserves which
+ are represented by a private key on the owner's computer. Users
+ create a reserve by depositing currency at a Taler exchange, and can then
+ withdraw digital coins from that reserve using the respective private
+ key. There is no limit on the number of reserves a user can have, and
+ even hacking the Taler exchange would not provide an adversary with access to
+ user's reserves (as the Taler exchange does not have the private keys).
+ Stealing in Taler requires breaking into each customer's computer to
+ extract the reserve keys or the coins from the digital wallet.
+ </p>
+ <p><a class="btn btn-info" href="http://yasserali.com/hacking-paypal-accounts-with-one-click/" role="button">Source</a></p>