4 ms·

If whatever API that mobile app uses were compromised, the attacker could easily update the address and then make changes to a user's account without the user r

If whatever API that mobile app uses were compromised, the attacker could easily update the address and then make changes to a user's account without the user receiving notifications to realize the problem.

ubercow13 8y ago
Not sure I understand - you don't receive notifications by post anyway? Why not just attack the 'transfer money' API instead of the address change one...
deleted 8y ago
[deleted]