3 ms·

How?

• ForHackernews 8y ago
  If whatever API that mobile app uses were compromised, the attacker could easily update the address and then make changes to a user's account without the user receiving notifications to realize the problem.
  • ubercow13 8y ago
    Not sure I understand - you don't receive notifications by post anyway? Why not just attack the 'transfer money' API instead of the address change one...
  • deleted 8y ago
    [deleted]