Looks like there is already a hack for these.
http://boingboing.net/2015/11/26/tin...et-simula.html
jtk
Looks like there is already a hack for these.
http://boingboing.net/2015/11/26/tin...et-simula.html
jtk
"A pessimist sees the difficulty in every opportunity; an optimist sees the opportunity in every difficulty."
- Sir Winston Churchill (1874-1965)
This has NOTHING to do with chip and pin. This uses the magnetic stripe. This is NOT about bypassing chip security.
Yep. And in the US, the chip cards don't use a PIN - you have to sign for the sale. I think there's a couple of reasons for this.
1. The card companies are afraid you will not remember the PIN and therefore will not use their card.
2. The processing people charge more to process a transaction with a signature than with a PIN.
However, people seem to be able to remember a PIN - for example the PIN to get into their smart phone or their bank debit card. So if the user can set the PIN on their card(s), they can certainly remember it.
Mike
Go into the world and do well. But more importantly, go into the world and do good.
I wonder if Amex has a response to this.
90% of the merchants we go to don't use the chip anyway. At least not yet.
Never, under any circumstances, consume a laxative and sleeping pill, on the same night
In every place we visit in Europe, EVERYONE uses the chip cards and PIN. From boat tickets in Venice to pizza in Switzerland.
JKJ
Target and Home Depot now accept chip cards. Many places have readers for chip cards, but they can't actually take chip cards yet.
You're right. I forgot that I used the chip card to pay for my Christmas tree at HD on Saturday.
Gerry
JointCAM
Yes and no. While it's a bit flip in the magnetic stripe, it's still a valid workaround to the Chip and Pin (by removing it form the equation altogether). The card is made to appear to the machine as if it's a standard non-chip card.
However, it should be noted this attack will only work for a short period of time (about a year from now). Once the requirement for ALL machines to accept chip-and-pin cards goes into effect, this trick will fail. Essentially, the machine will assume it's an old card that needs to be replaced by the issuer.
Hi-Tec Designs, LLC -- Owner (and self-proclaimed LED guru )
Trotec 80W Speedy 300 laser w/everything
CAMaster Stinger CNC (25" x 36" x 5")
USCutter 24" LaserPoint Vinyl Cutter
Jet JWBS-18QT-3 18", 3HP bandsaw
Robust Beauty 25"x52" wood lathe w/everything
Jet BD-920W 9"x20" metal lathe
Delta 18-900L 18" drill press
Flame Polisher (ooooh, FIRE!)
Freeware: InkScape, Paint.NET, DoubleCAD XT
Paidware: Wacom Intuos4 (Large), CorelDRAW X5
I don't understand what good the chip card is without the PIN. I thought the real reason for the chip cards was to tie a secret PIN to an encrypted chip that couldn't be copied easily like a magnetic strip.
A stolen card cannot be used if the PIN is required. Anyone can use anyone's card if the PIN is not required.
It seems to me that the only value of using the chip without a PIN is it eliminates the physical motion of sliding the card through the slot at the right speed. And just when I got good at that...
JKJ
Because the chip is a lot harder to replicate than the magnetic strip. Its very easy to read the data off a magnetic strip of a real card and store it, then later write it onto the strip of another card. Stolen physical cards aren't the big issue.
The chip generates a different number sequence for every transaction. If somebody hacks the system and gets that number it will do them no good. No, it doesn't help if someone actually steals your card, but the majority of the fraud has been criminals hacking into computer systems to get credit card numbers in large numbers.
Sure, but the OP's post made it sound like someone had managed to hack the actual chip itself which they have not.
Considering that I don't think even 25% of merchants have chip card readers yet I don't think this is a big deal. There are many large chains that still don't have chip card readers up and running. A local chain installed new credit card terminals along with a new POS system last summer. They still don't have the chip readers working. (Didn't have credit card terminals at all before.) I find it hard to believe that anyone would install a new POS system in 2015 and not be able to immediately accept chip cards.