By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
BeFirsTrankBeFirsTrank
  • Home
  • Car Reviews
  • Auto Shows
  • Bike Reviews
  • Future
  • New Car
  • Used Car
  • Contact Us !
Reading: Samsung Pay Service Reportedly Open to Hacking; Samsung Responds
Share
Aa
Aa
BeFirsTrankBeFirsTrank
  • Home
  • Car Reviews
  • Auto Shows
  • Bike Reviews
  • Future
  • New Car
  • Used Car
  • Contact Us !
Search
  • Home
  • Car Reviews
  • Auto Shows
  • Bike Reviews
  • Future
  • New Car
  • Used Car
  • Contact Us !
Have an existing account? Sign In
Follow US
© 2023 BeFirsTrank News Network
News

Samsung Pay Service Reportedly Open to Hacking; Samsung Responds

srijita
Last updated: 2016/08/12 at 5:11 AM
By srijita 3 Min Read
Share
SHARE
Samsung Pay Service Reportedly Open to Hacking; Samsung Responds

In a presentation given at Defcon, an ethical hacker named Salvador Mendoza highlighted what he believed to be major vulnerabilities associated with the Samsung Pay mobile payment service. He claims that the Samsung Pay service can be misused if payment tokens are skimmed. Samsung has responded to claims made by Mendoza, and has said that even though it is possible to exploit the vulnerability, it is an extremely difficult task to pull off.

In his presentation, Mendoza has shown how the payment tokens that are generated during the usage of Samsung Pay can be intercepted or (less credibly) even be fabricated by hackers to exploit users of Samsung’s mobile payment service.

Mendoza’s presentation showed how the payment tokens can be skimmed or intercepted. Tokens are sent from the mobile device to the payment terminal, implying the hacker needs to be standing close by. Since the tokens are single-use only, and expire within 24 hours, the payment will need to be halted after authentication for the token to remain valid and be misused. He even claims that the payment token generated by the South Korean company can be hypothetically figured out, and then used to develop tokens that can make purchases. However, Mendoza does not say he was able to generate any fake tokens himself.

Samsung in an FAQ responds to Mendoza’s Defcon presentation says that “token skimming” can be exploited, however, “multiple difficult conditions must be met”, which include close proximity to the user – as MST is a very short range communication system. The hacker will also have to either jam the signal before it reaches the payment terminal for the token to remain usable, or, somehow trick the user to stop the transaction after authentication. If despite all this, a hacker manages to get hold of a usable payment token, as soon as a transaction is made with it, the user will be notified on the associated smartphone – allowing them to alert authorities. As The Verge points out however, the entire process could be as simple as “setting up a fake payment terminal in a shop.”

The company has further clarified that the entire process of stealing and using payment tokens can apply to other payment systems as well – something that Mendoza himself admits to ZDNet – such as debit, credit, and payment cards.

As for the claim that hackers will be able to generate their own Samsung Pay payment tokens after analysing patterns, Samsung responded by saying, “It is important to note that Samsung Pay does not use the algorithm claimed in the Black Hat presentation to encrypt payment credentials or generate cryptograms.”

[“source-gadgets.ndtv”]

You Might Also Like

How Google’s AI can help transform health professions education

Certified AC Technicians in Ocala: Your Local Cooling Experts

Beyond the Map: What Modern Vehicle Tracking Can Do for Your Business

What Should My Video Game Room Have?

From Traditional Payments to Innovative Solutions: How Car Insurance Is Adapting to Modern Needs

TAGGED: Hacking, Open, Pay, Reportedly, Responds, Samsung, Service, to
srijita August 12, 2016
Share
Previous Article LG V20 Leaked Renders Tip Dual Camera Setup, Modular Chin
Next Article Xiaomi Redmi 3S, Redmi 3S Prime to Go on Sale on August 17

Calendar

September 2025
MTWTFSS
1234567
891011121314
15161718192021
22232425262728
2930 
« Aug    

Latest Trending News

  • How Google’s AI can help transform health professions education September 3, 2025
  • Your Ebike Battery is Draining Too Quickly? Six Reasons August 29, 2025
  • Test of Turbo Petrol-Powered Automobiles: Actual City and Highway Fuel August 26, 2025
  • Buying a Used VW Car in Albuquerque? Here’s What to Know August 21, 2025
  • What to Do If the Trunk of Your Nissan Won’t Open August 20, 2025
  • Fatherhood, marriage, and Longevity in the August 14, 2025
  • Style, Luxury, and Innovation in a New Car Coming in 2024 August 13, 2025

© 2023 Befirstrank News Network. All Rights Reserved.

Removed from reading list

Undo
Welcome Back!

Sign in to your account

Lost your password?