Google Wallet PIN security cracked in seconds

A researcher at website categoriser zvelo has discovered Google Wallet's PIN protection is open to a brute-force attack that takes seconds to complete. And Google is powerless to fix the problem, it seems.

The attack is limited to instances where physical access is available, or the phone has been previously "rooted" by the user. Once the assault succeeds the attacker can read the contents of the wallet including credit card numbers and other details such as the transaction history. Worse still, Google can't address the flaw without shifting responsibility for the PIN onto the banks, who might not want it. Read more...