Google Wallet Open for Business Again

From PC World: Google has issued a fix that changes the behavior of Google Wallet prepaid cards to prevent abuse. The ability to add new prepaid cards to Google Wallet has been restored, and the mobile payment system is back in business.

Following revelations that an unauthorized user could potentially gain access to funds available in a Google Wallet account, Google took proactive steps to prevent any such abuse while it worked on a fix. Google temporarily disabled provisioning of prepaid cards while it worked on a permanent fix.

The issue was a flaw in the way prepaid cards are managed that would allow an unauthorized user with a lost or stolen Google Wallet smartphone to access and spend funds from the device owner’s Google Wallet prepaid card. If the unauthorized user could get to the device settings and clear the data for the Google Wallet app, they would then be able to create their own PIN and add a new prepaid card. Once the new Google Wallet account and prepaid card were active the existing prepaid card information would also appear because the Google Wallet prepaid card is tied to the device rather than the user.

An update to a February 10 blog post from Google explains, “Yesterday afternoon, we restored the ability to issue new prepaid cards to the Wallet. In addition, we issued a fix that prevents an existing prepaid card from being re-provisioned to another user.”

The post goes on to say that Google is not aware of any abuse stemming from this flaw. Google responded to the discovery of the potential exploit to prevent behavior that might expose Google Wallet prepaid card funds, and ensure the security of Google Wallet.

View: Article @ Source Site