bardworxon Hacker News • Recommends
On “X-Ray Scans Expose Chip-And-Pin Card Hack”
This is a good overview by some researchers in the different ways Chip and Pin can be hacked. This explains this hack as well. link to this video
0:00 / 0:00
Chip & PIN Fraud Explained - Computerphile
Computerphile
2.6M subscribers • 70 videos on Hallway
- Recommended by 2 people: 2 on Hacker News.
- Presented by Ross Anderson, Professor of Security Engineering at the University of Cambridge
Beginner. No background in the topic needed.
850K views11 years ago2 recommendations
Ross Anderson explains how Chip and PIN payment systems are compromised through man-in-the-middle and card cloning attacks.
We rely on Chip & PIN machines to pay for things in a safe way, so how are they being compromised? Ross Anderson is Professor of Security Engineering at the Computer Laboratory, University of Cambridge. Man in the Middle Attacks: youtu.be/-enHfpHMBo4 AI Worst Case Scenario - Deadly Truth of AI: youtu.be/tcdVC4e6EV4 The Problem with JPEG: youtu.be/yBX8GFqt6GA facebook.com/computerphile twitter.com/computer_phile This video was filmed and edited by Sean Riley. Computer Science at the University of Nottingham: bit.ly/nottscomputer Computerphile is a sister project to Brady Haran's Numberphile. More at bradyharan.comWhy it's here
2 people recommend thisWhat people say. Recommended as a clear overview of the vulnerabilities and real-world attacks against Chip and PIN credit card systems.
Crosseye_Jackon Hacker News • Recommends
On “Fear the reaper: characterization and fast detection of card skimmers”
One trick (which I believe has been fixed) is not so much a replay attack but a multiple transaction attack. A modified terminal makes multiple transactions on the card while the card is still in the terminal, coupled with another attack that modified what was presented on the screen of the terminal could turn a single $5 transaction to 3 $500 transactions. The video is 3 years old now but still worth a watch discussing the attacks they have seen on Chip and Pin - link to this video
Matt3o12_on Hacker News • Mentions
On “‘Stop using paper checks,’ says agency in charge of them”
…. So, I personal prefer cards that require a signature. It doesn't matter to me if it has a chip or not (the chip has nothing to do with the pin, there are also chip-and-signature cards and cards that support both. The chip makes it hard to physically clone the card). If you are interested in the downsides of the new pin card, checkout this video: link to this video So, if zero authentication means that I am not liable for financial damages, I'm happy with it but I wouldn't bother to use a pin if I had the same liability. Unfortunately, the pin adds laughable authentication which makes me liable for many types of fraud (see the video).…