Researchers Demo Hack Against African Micro-Finance Accounts 52
mask.of.sanity writes "Security researchers have shown how to raid Africa micro-finance bank accounts en masse using fake audio one time passwords. The banks use audio one-time passwords to authenticate users logging into their accounts, but failed to implement properly security controls across numerous systems. Crucially, the researchers did not reveal how they cracked the encryption in order to protect users."
A *lot* of microfinance is just a scam (Score:4, Informative)
I know this is somewhat off-topic, but I was a big supporter of the whole micro-finance thing at one time myself. Sounds like a great idea and all, right? But then I saw former micro-financier Hugh Sinclair's BookTv segment [booktv.org] and read his book [amazon.com] and it opened my eyes to how much of this micro-finance fad has become a feeding ground for scammers, con men, and other vultures in the countries they're ostensibly supposed to be helping--and how much corruption there is in many of these "charitable" non-profits and financiers that sell the idea of micro-finance to well-meaning supporters.
Again, I know it's not directly related to the hack. But every time micro-finance comes up, I like to point out this info--since the vast majority of people still think of the subject in very naive and rosy terms, oblivious to the deep corruption that has become so pervasive in its execution.
Re: (Score:2, Insightful)
Meh, as an American, I've become desensitized to corruption. Yes, even more so than I have to violence.
Hearing that there is corruption in finance is like hearing water is wet.
Re:A *lot* of microfinance is just a scam (Score:4, Insightful)
I once heard someone say that you can tell how corrupt a charity is by the kind of car its director drives. If a charity's director is driving a new Mercedes, it's a pretty safe bet that most of your donations aren't going to feed hungry children. So now that's my rule of thumb for a charity: look into the intentions and lifestyles of the heads of the charity and you will probably see its true heart.
Re: (Score:2)
What if the head is a volunteer billionaire?
More or less corrupt?
Re: A *lot* of microfinance is just a scam (Score:2)
More corrupt.
How did he get to be a billionaire?
Re: (Score:2)
Re: (Score:2)
Lol only silly people think that people like bill gates and oprah control their money. They are brands beholden to their shareholders. So they might claim that money but only retards believe it is theres to spend and donate.
What does that even mean? Bill Gates made his money from Microsoft. Microsoft shareholders do not therefore control what he does with his money. Do you really think that an insurance company (or whoever) with a large block of Microsoft shares is going to want to fund polio vaccinations in Africa?
Re: (Score:1)
Somebody somewhere said something about heaven and a camel and the eye of a needle. It pretty much covers this situation.
Re: (Score:2)
I once heard someone say that you can tell how corrupt a charity is by the kind of car its director drives. If a charity's director is driving a new Mercedes, it's a pretty safe bet that most of your donations aren't going to feed hungry children. So now that's my rule of thumb for a charity: look into the intentions and lifestyles of the heads of the charity and you will probably see its true heart.
The counter-argument is that it is better for a charity to have one billion in donations and pay the director a million, rather than to have one million in donations and pay the director nothing.
Re:A *lot* of microfinance is just a scam (Score:5, Informative)
I think this is on a slightly different use of the term "microfinance", though there's overlap. The books you link are about microcredit [wikipedia.org] specifically, a hyped-up approach to poverty reduction based on very small loans spread throughout a community, which Grameen Bank [wikipedia.org] made famous. But the kind of microfinance this article talks about is more about regular banking: accounts and transactions, usually via a mobile phone. It's become popular in Africa because of the lack of traditional financial networks, and the increasing ubiquity of mobile phones as the main link into modern systems.
Re: (Score:2)
Mod Trepidity up.
And, to put a slightly finer point on this, we are (mostly) not talking about banking but using phone minutes as an alternative currency. As long as you know the other party’s phone number you can transfer minutes – you can be outside the country so you don’t have to worry about exchange rates – neither party needs a bank account, etc.
Re:A *lot* of microfinance is just a scam (Score:5, Insightful)
The entire thing is a scam and they are quite upfront with it.
I the charitable 1st worlder give free money to some bank in the 3rd world who supposedly gives a loan to a needy person.
This means I make no profit and a bank gets to charge interest to another person. Why the hell would I ever do that?
If it is my capital I want at least half the interest or just give the guy the money, either way at least some banker is not getting rich for free off my money.
Re: (Score:2)
Re: (Score:2)
It is free money to the bank.
They want me to donate it so they can lend it out.
See kiva.org for an example.
some charitable organizations do it right (Score:2)
where the organization itself acts as the "bank". That way the interest on the micro-loan goes back to the charitable organization and is used to fund more loans.
That is what Zidisha is. (Score:2)
Re: (Score:2)
I disagree. Microfinance organisations operate in a middle ground between charity and commercial banks. They offer a way to stretch your money. Instead of your $100 donation helping one person with a gift, the same $100 can be recycled dozens of times to help people via loans. It's the 'teach a man to fish' meme put into practice.
Any interest paid on the loan goes toward the operating cost. I don't mind this. In comparison, my commercial bank charges me ~$ 100/year for two accounts, a debit card and a credi
Re:A *lot* of microfinance is just a scam (Score:5, Insightful)
.
Wait a minute, that's the same type of scam pulled by the Red Cross and the United Way: they all come out of the woodwork during disasters and ask for a lot of donations and money (because they can skim off the top [heavily skim] of money, but not of actual goods) which can be put towards expensive cherry desks and mahogany paneling and half-a-million-dollars-per-year executive salaries.
.
Sadly, the business and MBA types find every possible way that people like to part with their money (whether it's for food you need, or toys you want or lust after, or donations you gladly give to help others or assuage their own consciences) and insert themselves into the equation to take the majority of the money as "overhead costs" for running the schemes themselves.
Re: (Score:1)
A lot of people don't even realize that the blood they're donating to the Red Cross is then *sold* by the Red cross to hospitals *at the market price*, with the money going into Red Cross coffers.
And they also don't realize that most donations for specific disasters go into the Red Cross *general fund*, and not towards that disaster. This became so controversial a few years back that I believe that had to change their policy to allow donors to earmark donations for a specific disaster, but *only* if the don
Re: (Score:2)
Re: (Score:2)
Who pays this money?
What does it take to get it?
Can't your mother hire some pizza delivery folks who are probably not busy during the day and collect it?
Re: (Score:2)
So then why don't the hospitals collect blood themselves and cut out the middle man?
Re: (Score:3)
I have always been wary of the Red Cross. I remember my grandfather telling stories about how they charged combat soldiers for coffee and donuts during WWII. No money--no food, tough luck G.I. He used to cuss like a sailor at anyone asking for a Red Cross money or blood donation.
Wonder if he knew my grandfather or my great uncles. They did pretty much the same thing after seeing this (and worse) behavior by the Red Cross during WWII in the South Pacific.
Re: (Score:2)
I give my charity contributions to The Salvation Army.
Sure. They are religious. But...
The bang for the buck is awesome and they do not tie their help to what religion the beneficiary is.
Re: (Score:1)
Really? So they don't insist on prays before meals? Are they still rather obnoxious about anyone who isn't straight? E.g. do they still refuse help to gay and lesbian couple? I bet they still lobby against marriage equality.
A couple of pages with further information:
The Bilerico Project - Why You Shouldn't Donate to the Salvation Army Bell Ringers [bilerico.com]
Don't Donate to the Salvation Army @ The Stranger [thestranger.com]
Re: (Score:2)
I give my charity contributions to The Salvation Army. Sure. They are religious. But... The bang for the buck is awesome and they do not tie their help to what religion the beneficiary is.
The fact that they are religious disqualifies them from my help. If they're religious, why can't their fucking god do something about the misery around them?
Ooh, I know, evil atheists want babies to die in the streets rather than support god-botherers.
Re: (Score:2)
--- s. The Lancet and the British Medical Journal reported the reuse of hypodermic needles, poor living conditions, including the use of cold baths for all patients, and an approach to illness and suffering that precluded the use of many elements of modern medical care, such as systematic diagnosis.[77] Dr. Robin Fox, editor of The Lancet, described the medical care as "haphazard", as volunteers without me
Re: (Score:1)
http://www.snopes.com/medical/emergent/redcross.asp
There is truth to one of the rumors, however. During WWII the American Red Cross did indeed charge American servicemen for coffee, doughnuts, and lodging. However, it did so because the U.S. Army asked it to, not because it was determined to make a profit off homesick dogfaces.
The request was made in a March 1942 letter from Secretary of War Henry L. Stimson to Norman H. Davis, chairman of the American Red Cross. Because American soldiers were fight
they logged in 10k times and checked stats... (Score:2)
.
Re: (Score:2)
it's a bit bullshitty because what they claim to have done would land them in jail no matter if it was for research or not, brute forcing voicemails etc.
if you go as far as to redirect victims phone you can do all kinds of scams.
the article could have been a bit more clear though about how these voice tokens work.
Count Zero (Score:2)
Once again, William Gibson was here first.
Re: (Score:2)
So you have either malware or a virus infecting your computer that you cannot get rid of, but we are to believe you have the technical prowess to hack this website.
The fix you are looking for is here http://www.ubuntu.com/download/desktop [ubuntu.com]
Good luck with your hacking there dummy.
William Gibson's Count Zero (Score:1)
Re: (Score:2)
Came here to say this. No mod points, alas.
Even at his bleakest and most inventive, Gibson is surprisingly prophetic.
so steal the money (Score:1)
Re: (Score:2)
By same logic, Wall Street shouldn't be allowed to have computers or money at this point.
Whistling (Score:2)