Users of Google smartphone wallets were being warned on Friday that there is a way to crack pass codes intended to thwart thieves from going on illicit shopping sprees.
Zvelo Labs researcher Joshua Rubin was featured in a video on the company’s Web site demonstrating software that quickly figures out a Google Wallet personal identification number (PIN), provided the crook has the smartphone.
Rubin said that Google has been alerted to the vulnerability and is moving swiftly to fix it. He has not made his wallet “cracker” application public.
“Google Wallet allows only five invalid PIN entry attempts before locking the user out,” Rubin said in a blog post. “With this attack, the PIN can be revealed without even a single invalid attempt. This completely negates all of the security of this mobile phone payment system.”
Google declined a request for comment.
“Once attackers get your PIN, they have full access to any credit card information stored in the app and they can use your phone to make purchases,” McAfee security firm researcher Jimmy Shah said in a blog post.
“As a user of Google Wallet, the main security you see is the PIN,” McAfee added. “What makes Wallet easy for you to use now makes it easy for attackers to use; they can now spend your money and credit just as if your phone were an ATM card.”
Rubin dismissed the threat of hackers picking Google Wallets remotely, saying that physical access is needed to get priority access to controls in a process called “rooting.”
Security specialists advise Google Wallet users not to “root” smartphones, and to enable security features such as full-disk encryption and screen locks.
NOT ALL GOOD: Analysts warned that other data for last month might be less rosy due to the virus and analysts expect the PMI to contract again next month Chinese factory activity saw surprise growth last month as businesses went back to work following a lengthy shutdown, but analysts said that the economy faces a challenging recovery as external demand has been devastated by the COVID-19 pandemic, while the World Bank said that growth could screech to a halt. China is slowly returning to life after months of tough restrictions aimed at containing the virus, which put millions of people into virtual house arrest and brought economic activity to a near standstill. The strict measures saw a closely watched gauge of manufacturing plunge to its lowest level on record in February,
The output of the global smartphone industry this year is to contract by 7.8 percent on an annual basis as the COVID-19 pandemic ushers in a global recession, Taipei-based market researcher TrendForce Corp (集邦科技) said in a report on Monday. The global production of smartphones is expected to fall to 1.29 billion units, as the pandemic dampens demand for consumer electronics, leading to a decline in shipments across Europe and North America, TrendForce said. With consumers delaying smartphone purchases and thereby lengthening the device replacement cycle, overall prices would suffer a setback that is expected to negatively affect the profitability of smartphone
ELECTRONICS Lite-On delays sale of unit Lite-On Technology Corp (光寶科技) yesterday said it would postpone the sale of its solid-state drives (SSD) business to Kioxia Holdings Corp, formerly known as Toshiba Memory Holdings Corp, due to disruptions amid the COVID-19 pandemic. Last year, the Taiwan-based electronics components supplier struck the deal with the Japanese firm, agreeing to sell the unit for US$165 million. Citing unfinished integration work due to the pandemic, Lite-On has deferred today’s closing date until further notice, adding that the delay would not have a negative effect on the unit’s operations. AUTO PARTS Hiroca approves dividend Automotive interior parts supplier Hiroca
ALL ABOUT STRATEGY: The company is optimistic, saying that its gross margin should increase year-on-year, but it is scaling back on its plans to expand capacity Quang Viet Enterprise Co (QVE, 廣越), which makes down jackets and garments for sportswear and outdoor brands including Adidas AG, yesterday said that revenue might drop 5 to 10 percent annually this year as some customers trimmed orders in response to the COVID-19 pandemic. That would mark its first revenue decline since 2016. Quang Viet posted record-high revenue of NT$16.26 billion (US$537.45 million) last year, up 22 percent from 2018. Down jackets made up 40 percent of it revenue last year. North Face Inc and Patagonia Inc are this year likely to reduce orders by 20 to 30 percent from a