Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

You can support consumer data access AND still think Chase has a point. In a recent Fintech Recap, Jason Mikula and I unpack JPMorgan Chase’s move to charge for API access and the the battle lines being drawn around open banking. On one side, fintechs and data aggregators argue...

16,442 Aufrufe • vor 10 Monaten •via X (Twitter)

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

Bakari Sellers goes on a bonkers tirade on CNN NewsNight with Abby Phillip: “They swapped out clan hoods for Brooks Brothers suits.” Sellers: “We are going to be the first generation to actually leave this country worse than the one that we inherited. Bakari: And I think for black millennials, uh the the the progress that our parents and grandparents gave us, that we're watching being ripped away from us is something that our generation is going to have to really wrestle with and and figuring out how we get out of this conundrum. If somebody fell asleep in 1896 and woke up today in 2026, they would simply say the only difference is now Negroes have a TV show and we wear nice suits. They they swapped out clan hoods for Brooks Brothers suits. And and that is the problem. I mean, Plessy v. Ferguson was 7-1 and it gave birth to 50 years of Jim Crow. What we have with this court right now, what we're seeing is is watching people who have fought and died and bled so that we would have access to the ballot box, so that we would have access to our voices being heard in Congress, being ripped away. And and I think that there is a casual laughter from people we believe to be our friends on the right who are showing us true colors today because the most sacred or one of the most sacred acts you have in the United States of America is the ability to cast a ballot and elect someone and send them to Congress, the state house or mayoral seat that represents your interest and now black folks throughout the South are being silenced. And I don't find that to be a laughing matter.”

Steve Guest

36,877 Aufrufe • vor 2 Monaten

A Constitutional Attorney SPEAKS OUT Against What The United States Government Has Become, TYRANNICAL. Calls Out Big Pharma MUST LISTEN: “We Have The Right To Resist — When in the world do we start testing things on children?” “We The People is how the Constitution starts. A magistrate is a person that operates under authority and they are lesser magistrates. The founding fathers of this country understood that there is going to come a point in time where the federal government will need to be checked. If not, they will become tyrants. ‌ And that is what's happening now. So, the Declaration of Independence says that everyone, by virtue of being a human being, has the right to life, liberty, and the pursuit of happiness. The federal government too, the federal government purpose is to protect the rights of those citizens, the rights of us to our life, liberty and pursuit of happiness. The third point of that document is if they fail to protect its citizens and enforce those rights, the citizens have a right to revolt. Do you understand? We have a right to resist and we have an obligation and a duty to do so. ‌ Do you understand? ‌ Yeah! ‌ THEY ARE COMING FOR OUR CHILDREN, We cannot sit down! Nope. ‌ Everybody knows even the bad ones know that if you want to affect a country, you go for its children. ‌ When in the world do we start using children as bulletproof vests for us? ‌ When in the world do we start testing things on children? Legal shield. ‌ You have started a war! ‌ Each one reach one and teach one. Do you understand? As a magistrate in this country, the United States government, our government, our local leaders have to answer to us. The ninth amendment says that any rights that are not enumerated in the Constitution are reserved for the people. I don't want to hear that mandates are not enumerated in the Constitution because for the stuff that is not enumerated means to equal protection is the right to protect my body. When you want to, when you want to push something into my body against my consent, without my consent, it is rape. And this is medical rape. No!”

Wall Street Apes

228,883 Aufrufe • vor 2 Jahren

Angry Democrat caller ERUPTS live on C-SPAN, torches Democrats over govt shutdown — announces he’s LEAVING the party. “I’m a Democrat, but I don’t understand what the party is doing… They’re holding out because THEY DON’T LIKE THE ORANGE MAN IN OFFICE. “So why are they blaming the other side when they’re the ones that have to come to the table and do the votes? They have to vote the right way to open the government and make sure that everybody has their checks and is getting paid. “And I think it’s kind of cruel to actually sit back and not participate because you don’t feel like the other party is doing what you want them to do. “There’s a trans section in there as well. They want to give money to afford trans surgeries for young kids. “And all this stuff that the Democrats have now gone into, which I am nowhere near. In fact, I think I’m going to be LEAVING the Democrat Party because this happens too often where they’re blaming the opposite party when they know they can do the right thing. “They need to do the right thing and reopen this government instead of keeping it shut down. Like they’re hijacking the American people. I’ve seen it before. We’ve seen them vote the right way when they’re in power, so why the hell can’t they vote the right way when they’re not in power? “So get this government back open. Get the American people what they deserve. And this is basically a Schumer shutdown. From what I’ve seen, from what I’ve been watching on C-SPAN, what they show [is] the Democrats whining and crying and blaming. That’s what I see.” The caller’s rant clearly left the C-SPAN host unamused. “All right, Jason,” she said before moving on to the next caller.

Vigilant Fox 🦊

73,192 Aufrufe • vor 9 Monaten

This is a standard practice for almost all Tier-1 banking applications in Nigeria, and for some fintech applications I’ve previously performed pentests on. Client-side encryption isn’t a total waste, or a waste of compute, as some people have claimed, but rather a measure to protect against API tampering or API request/response manipulation between the client and the server when implemented properly. Even with HTTPS, attackers can capture a decrypted version of web or mobile API data in transit because the browser and the server establish a level of trust during the TLS handshake. Attackers can leverage this trust to capture & proxy already-decrypted traffic, tamper with it, and then forward it to the server. This allows them to override what the user interface or client is originally supposed to send and replace it with data of their choosing. That is why validation needs to be performed on both the client and the server side. To wrap up, encrypting API requests and responses makes it significantly harder for attackers to tamper with data, even if they capture the traffic, unless they have access to the encryption details (algorithm, encryption mode, key size, secret key, and initialization vector), assuming asymmetric encryption is used. In the demo below, you can see how I discovered additional parameters (balance, is_admin) in the API response, captured the registration API request, despite it being sent over HTTPS from the interface, added the discovered parameters, and successfully inflated my balance to 50 billion and also escalated my privileges to admin, and ultimately deleted the accounts of two live users/customers. In the second slide, I captured an API traffic of a bank app, and you can see how difficult the payloads are to read.

Ghost St Badmus

217,475 Aufrufe • vor 7 Monaten