“Number26 PushTAN” or “When transaction verification is impossible”

A couple of months ago, I have dug into the security precautions of the Number26 banking application for Android. The flaw explained in this post is so obvious that the cows go home. I am surprised if this has not been abused by an evil party yet. Still, I am going to explain it in Read More …