full-disclosure - Is Your Online Bank Vulnerable To Currency Rounding Attacks?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <F525E356F1CC47ADB811EC817E3117E2@acros.si>
Date: Mon, 9 Jan 2012 17:25:08 +0100
From: "ACROS Security Lists" <lists@...os.si>
To: <bugtraq@...urityfocus.com>, <full-disclosure@...ts.grok.org.uk>,
	<cert@...t.org>, <si-cert@...es.si>
Subject: Is Your Online Bank Vulnerable To Currency
	Rounding Attacks?

Many online banks we've reviewed have been found to be vulnerable to the "currency
rounding attack". What's special about this attack? Not much, except that it seems to
be perfectly legal and allows one to make tens of thousands of EUR/USD per day. Read
about it in our blog and help your banks avoid it:

http://blog.acrossecurity.com/2012/01/is-your-online-bank-vulnerable-to.html

or

http://bit.ly/yp4idv

Enjoy the reading!

Mitja Kolsek, CEO

ACROS, d.o.o.
Makedonska ulica 113, SI - 2000 Maribor, Slovenia
Tel +386.2.3000.280  Fax +386.2.3000.282
Web http://www.acrossecurity.com
Blg http://blog.acrossecurity.com  Twt @acrossecurity

ACROS Security: Finding Your Digital Vulnerabilities Before Others Do

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/