Flicker
This page is a collection of information about FinTS Flicker Code. The more official term is optical ChipTAN, another name is Sm@rtTAN.
Contents
Intro
Requests
Several users asked for it:
https://bugzilla.gnome.org/show_bug.cgi?id=667490 - Support aqbanking feature: optical chip tan
Official Specs
State: 2017-07-25
Possibility
It is possible to use the chipTAN mode without Flickr in Gnucash.
If your bank account is configured for chipTan you get a dialog with the information of the transaction and a <start code>. And you get the information how to input these informations into the TAN generator. then you generate the TAN to put into the field in the dialog.
State: 2017-12-17
Other Details
https://wiki.ccc-ffm.de/projekte:tangenerator:start has useful links like
- flicker.sh
- JS Flickercode generator with Checksum calculation: http://6xq.net/blog/2010/flickercodes/flickercode.html
Videos
Initialization: https://www.youtube.com/watch?v=mCmQFEGf-_k
Transaction: https://www.youtube.com/watch?v=U7PnC1S-j4I
Approaches
Programs
Olaf Willuhn's GPL2ed Java based Hibiscus has also a nice german wiki and other links.
A incomplete list of FOSS banking software
Modules
An MIT-licensed javascript implementation is available at https://github.com/my-flow/fintex/blob/master/lib/tan/flicker_code.ex
Security
Already in 2009 was shown that it is not totally secure against man in the middle attacks: https://www.redteam-pentesting.de/en/publications/MitM-chipTAN-comfort/-man-in-the-middle-attacks-against-the-chiptan-comfort-online-banking-system
