[Gllug] [ot] borked net transaction

[Matthew Cooke]

Someone did this, I read an article about it somewhere.
They told a large bank that they could reprogram a chip to access an 
arbitary bank account.
The bank in question said "sure" and set up a bank account for him to break 
into.

He did access the account and took money out at a cashpoint where I believe 
he was picked up by police on a tip off from the bank.

I can't remember if i read it on slashdot or comp.risks but it didn't fill 
me full of confidence about the whole chip and pin security system.

Matt.

From: Matthew Thompson <matt.thompson at actuality.co.uk>
Reply-To: Greater London Linux User Group <gllug at gllug.org.uk>
To: chrisehunter at NOSPAMblueyonder.co.uk,Greater London Linux User Group 
<gllug at gllug.org.uk>
Subject: Re: [Gllug] [ot] borked net transaction
Date: Sat, 7 May 2005 12:23:03 +0100

>With a card reader and some simple inspection of the data held on  the 
>card, it
>really IS trivial to discover the PIN.  It took me a little while  to work 
>out
>how it's done, but I'm nothing special when it comes to data  analysis so 
>it
>MUST be trivial!

Were you able to modify the information or clone the card at all?

M at t :o)
--
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug


-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug