Скачать с ютуб Latvian Internet bank authentication token cross-site replay в хорошем качестве

Latvian Internet bank authentication token cross-site replay

This proof-of-concept video shows how the 5 month old Swedbank Internet bank authentication token can be replayed to successfully authenticate in several service providers. Swedbank is one of the banks to use a flawed protocol that does not provide the field specifying eligible receiver of the token. "Swedbank" AS spokesman Ivars Svilāns told that this risk is very hypothetical and in real life practically unexploitable. Swedbank uses flawed protocol even to this day. The same token was successfully replayed against service provider Latvija.lv on September 21, 2012. For more information visit: https://kodu.ut.ee/~arnis/bankauth/