[Bug 1096127]

Rune K. Svendsen runesvend at gmail.com
Sun Jan 6 23:12:07 UTC 2013


Upon further research, it appears that the applet in question loads
x86-specific binaries for execution.

The file DanID_Applet.jar contains an x86 ELF file disguised as a GIF
file:

    error.gif:                  ELF 32-bit LSB shared object, Intel
80386, version 1 (SYSV), dynamically linked,
BuildID[sha1]=0x24d556c0242ff5b0f28d097a920c4f82d6e89aca, not stripped

Apparently this collects various system information to create a
"checksum" that is sent to the bank and logged.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to icedtea-web in Ubuntu.
https://bugs.launchpad.net/bugs/1096127

Title:
  Fails to load "NemId" internet banking login applet ("Invalid checksum
  occurred")

Status in Iced Tea:
  Invalid
Status in “icedtea-web” package in Ubuntu:
  Invalid

Bug description:
  When going to the site https://www.portalbank.dk/6610/ the plugin on
  the site fails to load. I'm attaching the terminal output from firefox
  to the report.

  Other plugins, like the Java test applet
  http://www.java.com/en/download/testjava.jsp works fine on the system.

  The hardware in question is the Samsung ARM Chromebook.

  ProblemType: Bug
  DistroRelease: Ubuntu 13.04
  Package: icedtea-7-plugin 1.3-1ubuntu1.1
  Uname: Linux 3.4.0 armv7l
  ApportVersion: 2.7-0ubuntu2
  Architecture: armhf
  Date: Fri Jan  4 17:45:32 2013
  MarkForUpload: True
  SourcePackage: icedtea-web
  UpgradeStatus: Upgraded to raring on 2012-12-15 (19 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/icedtea/+bug/1096127/+subscriptions




More information about the foundations-bugs mailing list