Paper Clip Attack Skewers Chip and PIN
The Register reports that UK researchers have uncovered a serious flaw in the Chip and PIN machines that authenticate debit and credit card transactions. Two of the most popular PIN entry devices (PED) in the UK — the Ingenico i3300 and Dione Xtreme — are vulnerable to a “tapping attack”, using nothing more sophisticated than a paper clip, a needle and a small recording device. This basic kit enabled University of Cambridge Computer Labs researchers to record data exchanged between a card and the device’s processor without triggering tamper-proofing mechanisms. The devices analyzed by the team were borrowed from merchants, but they can also be purchased online for as little as $20.
