Kiwicon New Zealanders could print their own non-expiring 40c fuel discount vouchers thanks to a shoddy algorithm that a hacking duo has broken.
The algorithm developed by Countdown affects petrol stations operated by national energy provider Zand is designed as an incentive for consumers who shop at various supermarkets.
Countdown says it has developed a “technical solution” for barcode reuse, but it is unknown – and appears unlikely – if this shutters the flaw which allows new codes to be generated at will.
The petrol station had earlier disabled manual barcode entry at pumps to stop codes being shared online, but the researchers say fixing the flaw will require the algorithm to be re-written.
The two researchers, who requested anonymity, have generated the discount codes on a host of different platforms including an unpublished Android app, a barcode printer, and even on tee-shirts. For the full article click here
from hacker samurai http://ift.tt/1Zp4egz
via IFTTT
No comments:
Post a Comment