News for hackers. Stuff that matters.

A comment on Google Wallet: Send money via text message. Parent comment

Re:Google Wallet: Send money via text message by seccess on Friday December 11, 2015 @05:11PM (#10720463)
In that case, way to go, that is very impressive! I'm surprised the bounty was so low, honestly.

In response to your first comment, I should clarify that checking for a valid HTTPS URL SHOULD be sufficient, barring implementation errors in the browser. Of course, if the browser is insecure, all bets are off wrt web security. Implications may range far beyond phishing attacks in that case.

[ Parent | on HN ]
Re:Google Wallet: Send money via text message by Herrera on Friday December 11, 2015 @08:51PM (#10721431)
Thank you! I got involved with the security world recently and I'm really enjoying it. And I would like to clarify myself, the comment I made earlier was a little ambiguous. The bug that got fixed only spoofs the omnibox and not the HTTPS lock. The others spoof both. That said, when I am able to disclose these vulnerabilities, I intend to write a post about them.
[ Parent | on HN ]
Re:Google Wallet: Send money via text message by seccess on Saturday December 12, 2015 @01:58PM (#10723710)
You should, I would love to read that :)
[ Parent | on HN ]
Re:Google Wallet: Send money via text message by jsprogrammer on Friday December 11, 2015 @06:23PM (#10720869)
>Of course, if the browser is insecure, all bets are off wrt web security.

I guess this is a no go for now, then?

>There are three more they are working on.

[ Parent | on HN ]