TinyHack personal blog
Mastercard Internet Gateway Service: Hashing Design Flaw
Last year I found a design error in the MD5 version of the hashing method used by Mastercard Internet Gateway Service. The flaw allows modification of transaction amount. They have awarded me with a bounty for reporting it. This year, they have switched to HMAC-SHA256, but this one also has a flaw
- Points
- 131
- HN comments
- 20
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2017
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Sep 10, 2017 | Mastercard Internet Gateway Service: Hashing Design Flaw by solarized | 131 | 20 |
