4 ms·
Which security concerns have been voiced against iTANs? I saw them as the equivalent of a one-time-pad, secure as long as both the secret and the index are not
by enqk 13y ago
Which security concerns have been voiced against iTANs? I saw them as the equivalent of a one-time-pad, secure as long as both the secret and the index are not both intercepted. And super cheap and simple.
- mschuster91 13y agoPhishing. A MITM attack could "intercept" real transactions and exchange the receiving bank account ID without the user noticing (some even will manipulate the account transaction history!) so you'll only notice it when your bank calls you or your ATM/debit card won't work anymore because your account is empty.
- Kliment 13y agoAs a matter of fact, this is done (with user consent) by Sofort.com to authorize immediate payments. MITM as a service!
- enqk 13y agoisn't the same attack valid with token based cards (I'm only familiar with RSA's tokens) .. as long as you're in the middle, anything goes..
- mschuster91 13y agoSome of these tokens (active ones) display the transferred amount. I dont know if these are still actively used, though.
- Vespasian 13y agoAll tokens distributed by banks I've seen until now here display the amount and the receivers account number prior to generating the transaction confirmation number. So you can double check that everything is correct