←back to thread

Klarna users are being signed in to random accounts

(twitter.com)
475 points danielstocks | 2 comments | 27 May 21 10:28 UTC | HN request time: 0.412s | source
Show context
timdaub[dead post] ◴[27 May 21 11:25 UTC] No.27301664[source]▶
Sometime in the future, people will stop belittling crypto currencies when they realize that the digitization concepts of traditional finance technology providers are inferior to those of crypto currencies and blockchains. Putting safety and security first for anything that handles money makes sense.

The calls for "you don't need a blockchain, just use a database" will become less and less.

Edit: Of course, Hacker News hates this comment.

rad_gruchalski ◴[27 May 21 11:32 UTC] No.27301729[source]▶
Because it’s totally unrelated to the problem Klarna is facing. What does authentication / authorisation have to do with financial system...
replies(1): >>27301739 #
timdaub ◴[27 May 21 11:33 UTC] No.27301739[source]▶
Get your vocabulary right. Klarna is having an authorization problem not an authentication one.
replies(1): >>27301882 #
1. akoncius ◴[27 May 21 11:50 UTC] No.27301882[source]▶
seems like you have issues with vocabulary - it clearly indicates that problems are with authentication, not authorization :D each time klarna identifies user as different user.
replies(1): >>27305388 #
2. timdaub ◴[27 May 21 17:10 UTC] No.27305388[source]▶
If I can see another user's balance as is shown in the tweet of the original poster, that to me is an authorization problem as its concerned with access. Why? Because as user A I should not be able to read information of users B to Z.

I don't think it's an authentication problem as there's no confirmed problem with proving an assertion as in e.g. (sha3("hello") === "0xabc") in the original post.