{"guid":"74783236-46f4-493c-9574-1b27a44847b7","title":"Shut Up and Take My Money!","subtitle":"The Red Pill of N26 Security","slug":"33c3-7969-shut_up_and_take_my_money","link":"https://fahrplan.events.ccc.de/congress/2016/Fahrplan/events/7969.html","description":"FinTechs increasingly cut the ground from under long-established banks’ feet. With a \"Mobile First\" strategy, many set their sights on bringing all financial tasks—checking the account balance, making transactions, arranging investments, and ordering an overdraft—on your smartphone. In a business area that was once entirely committed to security, Fintechs make a hip design and outstanding user experience their one and only priority. Even though this strategy is rewarded by rapidly increasing customer numbers, it also reveals a flawed understanding of security. With the example of the pan-European banking startup N26 (formerly Number26), we succeeded independently from the used device to leak customer data, manipulate transactions, and to entirely take over accounts to ultimately issue arbitrary transactions—even without credit.","original_language":"eng","persons":["Vincent Haupert"],"tags":["Security"],"view_count":54441,"promoted":false,"date":"2016-12-27T16:45:00.000+01:00","release_date":"2016-12-27T01:00:00.000+01:00","updated_at":"2026-04-06T17:15:05.703+02:00","length":1850,"duration":1850,"thumb_url":"https://static.media.ccc.de/media/congress/2016/7969-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2016/7969-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2016/74783236-46f4-493c-9574-1b27a44847b7-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2016/74783236-46f4-493c-9574-1b27a44847b7-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/33c3-7969-shut_up_and_take_my_money","url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_title":"33C3: works for me","conference_url":"https://api.media.ccc.de/public/conferences/33c3","related":[{"event_id":1057,"event_guid":"import-d93f6f776ff5e0bf3d","weight":57},{"event_id":2291,"event_guid":"2f68e356-6c3f-4034-9640-c06d717ed96b","weight":101},{"event_id":2814,"event_guid":"3cb4101c-2042-4883-b6fb-6591994a70c0","weight":123},{"event_id":2826,"event_guid":"9ab1407a-126f-48d9-898d-eae7974324e9","weight":42},{"event_id":2827,"event_guid":"f79c744f-30d1-4175-a173-2e760049337d","weight":35},{"event_id":2868,"event_guid":"0549d204-604a-46c5-92a2-e64b85aa9892","weight":45},{"event_id":2871,"event_guid":"74515f8e-a752-4cbb-b407-3a70fca5b0b3","weight":190},{"event_id":2892,"event_guid":"668ba44b-6800-4a8f-9544-b8e5cd7bd86c","weight":37},{"event_id":2907,"event_guid":"3b16ddc9-499b-44b1-9084-b3e328daea30","weight":52},{"event_id":2922,"event_guid":"47cbd880-f500-4c44-b717-c11ed1da087d","weight":39},{"event_id":2938,"event_guid":"03c8501f-d327-4228-a9fe-2635370d25d2","weight":63},{"event_id":3596,"event_guid":"b8e0eb47-4832-4726-bc9b-9015bd96becf","weight":60},{"event_id":3597,"event_guid":"87092ad2-d3fd-4a37-bb58-1fe71217a06b","weight":120},{"event_id":3598,"event_guid":"f75d0531-ac47-4edd-99bd-9eadd836982a","weight":64},{"event_id":3599,"event_guid":"c54bec28-0cec-4472-9a0f-36be8b626dd7","weight":43},{"event_id":3601,"event_guid":"5a517be2-220b-4eb6-88c3-e7ef08c98ace","weight":198},{"event_id":3603,"event_guid":"798573a8-f544-48f0-abaf-ebc405f03f4a","weight":75},{"event_id":3604,"event_guid":"1275f046-e52e-4b0b-9f5b-7eb2008b2ec4","weight":54},{"event_id":3605,"event_guid":"61f9d4c6-a3de-4958-a57c-efcf941668fa","weight":49},{"event_id":3606,"event_guid":"1aa7a4c5-1a3f-444f-99fb-e9c7b4744794","weight":90},{"event_id":3607,"event_guid":"64c07cb5-ec19-4972-a2c8-96c0e0df83c6","weight":86},{"event_id":3608,"event_guid":"a0c851a1-b44e-46cb-bbb8-db966bc8639b","weight":48},{"event_id":3610,"event_guid":"56537f49-c8f0-4d73-bdba-d4d8307fc170","weight":209},{"event_id":3612,"event_guid":"c92203a0-9158-4111-ab52-5dacd0e46c73","weight":87},{"event_id":3614,"event_guid":"450d2481-6606-40fe-ba8b-7117d4724155","weight":70},{"event_id":3616,"event_guid":"e4fbbb8d-0b74-4129-83b7-bda2247175bc","weight":76},{"event_id":3617,"event_guid":"cb67ad7f-7e12-4f34-aec0-748a61f3f958","weight":64},{"event_id":3618,"event_guid":"fc959f0c-5e93-4b23-8a63-5b6478adb700","weight":65},{"event_id":3619,"event_guid":"84ce6d72-3f4f-445b-801e-37f6a1331bed","weight":54},{"event_id":3620,"event_guid":"dd070191-1d1c-4b9c-a887-e4950a688cdb","weight":77},{"event_id":3623,"event_guid":"b7e028fa-175f-464d-bc85-adf56e358626","weight":38},{"event_id":3624,"event_guid":"600ca67d-e18d-49d8-8e5d-08d5b38ec528","weight":75},{"event_id":3626,"event_guid":"c3844820-b5ed-4b12-9094-cfc67aff60be","weight":55},{"event_id":3627,"event_guid":"143759c6-2cad-4fc8-a120-86dcc8de97e6","weight":117},{"event_id":3628,"event_guid":"4de841b2-0f34-494e-ba5b-0b79ba2c88cd","weight":115},{"event_id":3629,"event_guid":"686b1941-b211-4902-b4c4-1d642398e08b","weight":132},{"event_id":3632,"event_guid":"378cdf23-350b-4a05-afd0-6360139a7a06","weight":170},{"event_id":3633,"event_guid":"530f0400-e4e8-4d99-909d-4cfc8121c0b0","weight":314},{"event_id":3634,"event_guid":"361946ca-4577-467d-b608-022c8a2d3164","weight":36},{"event_id":3640,"event_guid":"700a07e7-a9c4-437b-a4c5-4491b23a9b4a","weight":535},{"event_id":3643,"event_guid":"2689ebfe-0d84-4c88-9ea6-5cadad9d4fa4","weight":151},{"event_id":3644,"event_guid":"d1681340-162c-48ce-8c0b-61c3e176696d","weight":137},{"event_id":3646,"event_guid":"f32a1a13-b244-4a1d-a6cf-99c5e3bdad27","weight":93},{"event_id":3652,"event_guid":"60b52369-b0ee-455f-904a-4dfef49596eb","weight":73},{"event_id":3654,"event_guid":"ac80424a-f4dc-431d-95f3-3f85664ba2dc","weight":78},{"event_id":3656,"event_guid":"1a6657a2-b6c2-4acc-b8fc-5ec081c0877f","weight":99},{"event_id":3662,"event_guid":"8c32309e-7136-4899-8ee4-1558e63ad137","weight":130},{"event_id":3664,"event_guid":"e4eb4104-b9e7-4e99-bcb2-d10ddff3e19a","weight":64},{"event_id":3667,"event_guid":"6347d122-daf0-4b30-851c-32cac06bf6bd","weight":265},{"event_id":3668,"event_guid":"4745fbc3-87d4-41eb-8c82-2c1bb8a51beb","weight":42},{"event_id":3669,"event_guid":"7ef9172a-e2c7-4e78-9316-08449bd582c6","weight":37},{"event_id":3671,"event_guid":"4ef69e6a-026f-4b30-888d-af654b220a3d","weight":254},{"event_id":3674,"event_guid":"bfc2ab1f-8384-4d7d-801a-dde8c81e039c","weight":50},{"event_id":3676,"event_guid":"f6811c99-96af-44d5-b82d-5afe826b2caf","weight":167},{"event_id":3681,"event_guid":"149f13d4-cc8c-49a9-9e68-544754646022","weight":43},{"event_id":3683,"event_guid":"1b27dbeb-cffc-48a1-b2e6-b2011c338a50","weight":66},{"event_id":3687,"event_guid":"5ae90a09-0b83-4357-bdb4-9afc04100c68","weight":94},{"event_id":3689,"event_guid":"1f7eb981-2819-4824-8f40-4ddde0be7bf3","weight":461},{"event_id":3692,"event_guid":"f21478d4-e8db-4f19-854c-2f74b5824706","weight":245},{"event_id":3695,"event_guid":"c300b194-2a85-4705-92aa-b4e789882303","weight":610},{"event_id":3696,"event_guid":"9d36932f-616a-4677-b924-60c1986fbbfc","weight":51},{"event_id":3701,"event_guid":"155a622a-196e-4e05-a262-88f3a7726bbe","weight":111},{"event_id":3702,"event_guid":"5fb5e620-383a-4679-b37a-beef20bcd4fe","weight":47},{"event_id":3706,"event_guid":"3f76be27-6ff5-4a23-a6c6-512eaff00f28","weight":36},{"event_id":3708,"event_guid":"aaec73e9-66b9-46d2-aa0f-9f43018198ea","weight":50},{"event_id":3712,"event_guid":"cb23378b-6db0-4e2f-a4c8-f5006a467ca3","weight":46},{"event_id":3719,"event_guid":"d851c029-9f83-41af-befd-a54209453d41","weight":36},{"event_id":3720,"event_guid":"198bdfe5-24cf-4b2f-9cd5-7522a99b3b4e","weight":43},{"event_id":3723,"event_guid":"f1e2dc22-8925-4a8a-8cd3-4d03aa0e33b7","weight":119},{"event_id":3726,"event_guid":"7c3a4ac8-1925-4459-bdd8-b9d9e18a6cfa","weight":63},{"event_id":3731,"event_guid":"bc638f9f-0370-42f9-b83c-f85cca4ca38d","weight":67},{"event_id":3734,"event_guid":"34ea8f1f-9fad-41aa-8424-e833f10e5e8b","weight":132},{"event_id":3737,"event_guid":"d51d9e44-947b-4a09-94ad-c31c5cf5e5e1","weight":181},{"event_id":3739,"event_guid":"61677c86-8d83-4c30-9cf4-f7741e1a8798","weight":53},{"event_id":3742,"event_guid":"7a5971c8-746b-4450-ba89-6569667f77c2","weight":47},{"event_id":3747,"event_guid":"fc6c53de-ec9d-4966-a912-5cfaf54c0dd2","weight":100},{"event_id":3758,"event_guid":"14590762-b249-463b-9617-46d0f0d3f5b3","weight":36},{"event_id":3760,"event_guid":"1c75e6a1-e586-4b91-abce-92a4561d0181","weight":401},{"event_id":3761,"event_guid":"b598ebbf-0fc6-4127-bb9d-20ae18f1171d","weight":125},{"event_id":3762,"event_guid":"25e2df7d-5740-4c2f-bc34-986326d606fe","weight":404},{"event_id":3763,"event_guid":"8fbee7ff-b50c-4310-af9d-d44794669f25","weight":145},{"event_id":3764,"event_guid":"b1a28d62-75e9-48de-bec9-44df4e611685","weight":104},{"event_id":3767,"event_guid":"0c197c9a-35eb-4780-a38d-9c53b7ff9bea","weight":56},{"event_id":3851,"event_guid":"a2b0d408-3f34-11e7-a2ff-b7e0ed5cc95f","weight":62},{"event_id":3853,"event_guid":"efeeaebc-3f29-11e7-9ba7-2f214305c877","weight":134},{"event_id":4763,"event_guid":"2ef3b60f-6e5c-4c23-a145-d263685ec13e","weight":46},{"event_id":4794,"event_guid":"a2887b4a-0c9d-4220-a52f-c65c20ae25d7","weight":213},{"event_id":4826,"event_guid":"16645200-2036-4a3c-a44d-a5ff44ac2991","weight":37},{"event_id":4866,"event_guid":"117a52b4-f675-49dd-aafe-659c07b6bc9c","weight":64},{"event_id":4929,"event_guid":"8e222759-cd6b-403b-8fe1-3517bf7d2802","weight":35},{"event_id":6115,"event_guid":"93b7d8a6-345b-405a-a3f2-0dc09ddd2e28","weight":54},{"event_id":6233,"event_guid":"9fa9eae0-2d2f-4bce-a7f5-1983003b3db7","weight":96},{"event_id":6474,"event_guid":"f58a2b6d-bde0-483b-a8db-043ea9371cb6","weight":37},{"event_id":6543,"event_guid":"48ed6dea-e67d-4866-8c35-318e9d892363","weight":41}],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money.en.srt","state":"complete","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2020-01-03T19:23:05.859+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money.en.srt","url":"https://api.media.ccc.de/public/recordings/44415","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":156,"length":1850,"mime_type":"video/mp4","language":"eng","filename":"33c3-7969-eng-Shut_Up_and_Take_My_Money.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-27T19:40:55.259+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-7969-eng-Shut_Up_and_Take_My_Money.mp4","url":"https://api.media.ccc.de/public/recordings/13571","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":177,"length":1850,"mime_type":"video/mp4","language":"deu","filename":"33c3-7969-deu-Shut_Up_and_Take_My_Money.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-27T19:41:15.205+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-7969-deu-Shut_Up_and_Take_My_Money.mp4","url":"https://api.media.ccc.de/public/recordings/13572","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":177,"length":1850,"mime_type":"video/mp4","language":"fra","filename":"33c3-7969-fra-Shut_Up_and_Take_My_Money.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-27T19:41:36.755+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-7969-fra-Shut_Up_and_Take_My_Money.mp4","url":"https://api.media.ccc.de/public/recordings/13573","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":283,"length":1850,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-27T19:42:11.812+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-hd/33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money_hd.mp4","url":"https://api.media.ccc.de/public/recordings/13574","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":198,"length":1850,"mime_type":"video/webm","language":"eng-deu-fra","filename":"33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-12-28T14:28:40.492+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/webm-hd/33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/13746","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":28,"length":1837,"mime_type":"audio/mpeg","language":"eng","filename":"33c3-7969-eng-Shut_Up_and_Take_My_Money.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2016-12-28T15:31:17.201+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/mp3/33c3-7969-eng-Shut_Up_and_Take_My_Money.mp3","url":"https://api.media.ccc.de/public/recordings/13785","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":110,"length":1850,"mime_type":"video/mp4","language":"eng-deu-fra","filename":"33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-12-28T15:38:46.544+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/h264-sd/33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money_sd.mp4","url":"https://api.media.ccc.de/public/recordings/13801","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":23,"length":1837,"mime_type":"audio/opus","language":"eng","filename":"33c3-7969-eng-Shut_Up_and_Take_My_Money.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2016-12-28T15:39:09.689+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/opus/33c3-7969-eng-Shut_Up_and_Take_My_Money.opus","url":"https://api.media.ccc.de/public/recordings/13802","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"},{"size":96,"length":1850,"mime_type":"video/webm","language":"eng-deu-fra","filename":"33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-12-28T15:51:14.610+01:00","recording_url":"https://cdn.media.ccc.de/congress/2016/webm-sd/33c3-7969-eng-deu-fra-Shut_Up_and_Take_My_Money_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/13824","event_url":"https://api.media.ccc.de/public/events/74783236-46f4-493c-9574-1b27a44847b7","conference_url":"https://api.media.ccc.de/public/conferences/33c3"}]}