Latest in Account

Image credit:

Google Wallet gets prepaid security fix, but 'brute-force' issue still hangs in the air

Sharif Sakr
02.15.12
Share
Tweet
Share
Save

Sponsored Links

Google says it's fixed a Wallet security flaw that potentially allowed a phone thief to spend a user's prepaid balance. The ability to provision new prepaid cards had been suspended pending the update, but has now been restored. Things aren't quite back to normal in the Big G's world of mobile money, however. Users still find themselves caught between two competing arguments over an entirely different vulnerability, which involves a 'brute-force' attack on rooted devices. Google insists that this isn't a major concern, so long as Wallet users refrain from rooting, and that the system still "offers advantages over the plastic cards and folded wallets in use today." On the other hand, the company that discovered this issue -- zvelo -- has come back at Google with an equally blunt response. It acknowledges that a handset must be rooted to be vulnerable, but crucially its researchers also say that a device doesn't have to be rooted before it's stolen. In other words, they allege that a savvy thief can potentially steal a phone and then root it themselves, and they won't be happy with Wallet until it requires longer PIN number. Whichever argument sways you, it's worth bearing in mind that there's no evidence that anyone has yet managed to exploit these weaknesses for criminal purposes.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Share
Tweet
Share
Save

Popular on Engadget

After Math: Hey there, big spender

After Math: Hey there, big spender

View
Hackers targeted BMW, Hyundai in hunt for trade secrets

Hackers targeted BMW, Hyundai in hunt for trade secrets

View
Ericsson will pay over $1 billion to settle US corruption charges

Ericsson will pay over $1 billion to settle US corruption charges

View
Apple's redesigned Mac Pro will be available to order December 10th

Apple's redesigned Mac Pro will be available to order December 10th

View
'Free Guy' trailer shows a video game NPC without chains

'Free Guy' trailer shows a video game NPC without chains

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr