Technology

59217 readers

2607 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

379

Two students find security bug that could let millions do laundry for free (www.theverge.com)

submitted 5 months ago by [email protected] to c/[email protected]

87 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 5 months ago (1 children)

Meaning I could either back up and rewrite a $20 card forever, or rewrite the balance to having FF credits or whatever.

As you can guess, checksum is stored somewhere. And that somewhere happens to be card that was just dumped.

[–] [email protected] 4 points 5 months ago* (last edited 5 months ago)

Yeah, but you'd need the algorithm. It could be a hash of some kind, and if you don't know what kind of algorithm they're using you can't replicate it.

EDIT: Oh, I see what you're saying. You mean you could simply rewrite the original card value back over it forever. That's actually quite clever, and it would work even in case the card was completely encrypted.

Actually that means this is trivial to beat I think.