(1/x) Spain's largest online card processor: * XML inside XML * Signing XML as text: cannot use a real XML parser or the signature breaks
-
(3/x) * Signing key is pre-diversified in a dumb way for no reason, reducing entropy * CBC mode with all-0 IV
(4/x) * Their reference manual is useless (no mention of modes, IVs, etc): only way to interoperate is to reverse engineer their sample API.
-
-
(5/x) * They have multiple callback mechanisms, but inexplicably the only usable one (positive synchronous confirmation) requires SOAP.
-
(6/x) Seriously, this code of theirs. Go on, try to understand it. Input:<Message><Request>...</Request><Signature>...</Signature></Message>pic.twitter.com/ZPM83nGVSe
- Show replies
New conversation -
-
-
Welcome to the hell I've been living for the past week (and thank you thank you thank you for taking a look :D)
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
You gotta love it when Enterprise™ systems turn out worse than a hackish solution developed in a day.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
god damn what a trainwreck
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.