Google Fixes Security Hole in its Wallet

A vulnerability in the Google Wallet would have enabled people to gain unauthorized access to Google Prepaid Card balances.

February 16, 2012

MOUNTAIN VIEW, CA - Following a hack last week that showed how unauthorized users could clear data from the Google Wallet app settings and gain access to any unspent balance, Google Wallet chief Osama Bedier announced earlier this week that the company had implemented a security fix, NFC Times reports.

Bedier maintained the fix prevents existing prepaid cards from being "reprovisioned" by other users.

"While we€™re not aware of any abuse of prepaid cards or the Wallet PIN resulting from these recent reports, we took this step as a precaution to ensure the security of our Wallet customers," Bedier announced in an update posted to the Google Commerce blog.

"We took this step as a precaution until we issue a permanent fix soon," he told the news source.

Last week€™s hack followed a more complex one on the PIN protecting the wallet, which required the hacker to have possession of the phone and install PIN-cracking software.

According to NFC Times, the two hacks were not major threats to the payment application, which it characterized as "more secure than the leather wallets and magnetic-stripe cards."

"The vulnerabilities got a lot of play in the press, which creates another problem for Google as it seeks to encourage more consumers to use the wallet," NFC Times said.

Researchers had previously announced that Google Wallet could compromise card data.

Advertisement
Advertisement
Advertisement