Showing posts with label online banking. Show all posts
Showing posts with label online banking. Show all posts

Saturday, November 16, 2013

installing Oracle "Java SE for Embedded" on a Synology NAS


I think, I will use his description for setting up Java on my Synology NAS (resp. NASs), so that I can run the Hibiscus Server (implemented in Java) on them. My NAS at home has plenty of Internet bandwith available, so that I can get my bank account transactions updated over the Internet quite often each day.

Oracle's description on "Oracle Java SE Embedded Downloads":

For the DS112+ I chose the "ARMv5 Linux" entry "successfully". The ARMv6/7 and ARMv7 entries did not run at all. 

For the DS213+ I chose the "Power Architecture Linux - … - e500v2" entry "successfully".

Friday, November 15, 2013

Hibiscus Payment Server – HBCI banking

With the hibiscus-server running on (let's say) your current machine at port 8080 (AKA https://localhost:8080), you have a few rather useful services available:

I would love to see this running on my Synology NAS at home with plenty of Internet bandwith available, so that I can get my bank account transactions updated over the Internet a few times each day.

These days Synology does not supply Java on their devices – I assume, they do not want to get officially bothered with Java difficulties on their devices. But still here I found a description of how to install Oracle Java SE on a Synology NAS:
Wth the "https://localhost:8080/webadmin/rest/hibiscus/konto/…" REST services listed above I get hold off account data rather, rather easily like this:
$ curl --sslv3 --insecure \
    --user jameica:PASSWORD \
    https://localhost:8080/webadmin/rest/hibiscus/konto/list
Now I prefer developing software using Perl, and I will make use of the JSON lists in Perl, and that should be rather easy. I think, I am going to abandon my web-scraping scripts in Perl, once all this is in place. Web-scraping banking web-sites is a rather tedious business, whereas HBCI is a confirmed banking standard in this country (Germany), and I consider the Hibiscus Server as a rather either way to deal with the HBCI Moloch AKA FinTS.

…:

Wednesday, March 27, 2013

de-obfuscated again – "Berliner Sparkasse" web banking access reverse-engineered

A couple of weeks after "Berliner Sparkasse" renovated their online banking portal, I managed to amend my automated account statement download to work with their portal again. Actually it is not just amending, I rather had to write it again. Alright, I actually gained some experience in that area through the years, but it still is rather a hard and frustrating business.

Their portal uses obfuscated HTML, so it's not a trivial job, and you never really know in advance, whether you invest your time properly and successfully in that reverse engineering job. (At some stage I sometimes think, I will give up.) To put things right: this is not a job I am getting paid for, it just eases my task of regular and frequent downloading the statements of all bank accounts belonging to "family and company".

I would be terribly honoured to get invited to present my page scraping and de-obfuscation approach at some workshop or conference. If  the circumstances of the invitation would allow me to not loose money by missing on my bread-and-butter job, that would be so welcome!! If de-obfuscation and page scraping would even become my special niche to make a little money on, maybe fund my sons' education and maybe even avoid the hardnesses of expected old-age poverty – oh, paradise!!!

No, actually I don't really want to help the "obfuscation community" to improve their obfuscation frameworks, but then … – you should understand: on my side this is a one-man-show, they get backed by the financial industry and whoever.

Saturday, September 17, 2011

Another online banking trojan for Android - The H Security: News and Features

Another online banking trojan for Android - The H Security: News and Features: An Android version of SpyEye, a trojan that has previously only targeted PCs and Symbian, has now been sighted. After ZeuS, this is the second piece of malware to bypass the mTAN system on this platform