3 ms·
During demonetisation in India (2016), Mobile wallet startups threw the privacy out of window. Paytm (India's largest e-Wallet), asked customers to enter their
by Abishek_Muthian 8y ago
During demonetisation in India (2016), Mobile wallet startups threw the privacy out of window.
Paytm (India's largest e-Wallet), asked customers to enter their credit card details on their app on merchant's smartphone. I reported the security risk to them with a POC to their bounty hunting[1], they asked me to wait, removed the feature & the CEO told media that I was lying, there was never a security risk.
Mobiwik, read customer's SMS of bank transactions to inform its users which ATMs had cash.
[1]:https://abishekmuthian.com/paytm-says-to-me-that-its-pos-feature-didn-t-have-a-security-risk-8fd7c3849e54 https://abishekmuthian.com/paytm-says-to-me-that-its-pos-fea...