Lance James wrote:
Eric B wrote:
Wait, so if I read this right, consumers with existing cards could
dupe their legit cards for fake ones and cash in the fake ones yet
still have credit on the legit card?
So I'm assuming Fedex has no database/authentication system storing
these
Eric B wrote:
Wait, so if I read this right, consumers with existing cards could
dupe their legit cards for fake ones and cash in the fake ones yet
still have credit on the legit card?
So I'm assuming Fedex has no database/authentication system storing
these serials...brilliant.
Yup.
Abstract:
-
The ExpressPay stored-value card system used by FedEx Kinko's is
vulnerable to attack. An attacker who gains the ability to alter the
data stored on the card can use FedEx Kinko's services fraudulently
and anonymously, and can even obtain cash from the store.
Description:
