‘Replay’ Attacks Spoof Chip Card Charges

Discussion in 'malware problems & news' started by ronjor, Oct 27, 2014.

  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,728
    Location:
    Texas
    http://krebsonsecurity.com/2014/10/replay-attacks-spoof-chip-card-charges/
     
  2. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,057
    So it looks like transition to chip and PIN will have two security loopholes right from start:
    1. Chip and PIN will be replaced with Chip and Signature, so anybody can use your stolen card.
    2. Banks won't implement EMV protocol properly, so MITM attack will be possible.

    Great. Why even bother with transition?
     
  3. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,196
    Location:
    Surrey, England.
Loading...