LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > General
User Name
Password
General This forum is for non-technical general discussion which can include both Linux and non-Linux topics. Have fun!

Notices


Reply
  Search this Thread
Old 01-01-2011, 05:49 AM   #31
brianL
LQ 5k Club
 
Registered: Jan 2006
Location: Oldham, Lancs, England
Distribution: Slackware64 15; SlackwareARM-current (aarch64); Debian 12
Posts: 8,302
Blog Entries: 61

Rep: Reputation: Disabled

I think the Black Helicopters have whisked H_TeXMeX_H away.
 
Old 01-01-2011, 12:11 PM   #32
ntubski
Senior Member
 
Registered: Nov 2005
Distribution: Debian, Arch
Posts: 3,786

Rep: Reputation: 2083Reputation: 2083Reputation: 2083Reputation: 2083Reputation: 2083Reputation: 2083Reputation: 2083Reputation: 2083Reputation: 2083Reputation: 2083Reputation: 2083
Quote:
Originally Posted by GrapefruiTgirl View Post
Meanwhile: likely the communication protocol & handshaking system between the chip and the reader, is not rocket-science - malicious cloning or reproduction of the chips will not be impossible forever.
Also, it turns out the protocol is crappy so criminals can use stolen cards without knowing the PIN or copying any data from card.

Chip and Pin is broken
 
Old 01-02-2011, 07:28 PM   #33
Arty Ziff
Member
 
Registered: May 2008
Location: Tacoma, WA
Distribution: CentOS and RHEL
Posts: 124

Rep: Reputation: 15
Quote:
Originally Posted by ntubski View Post
Also, it turns out the protocol is crappy so criminals can use stolen cards without knowing the PIN or copying any data from card.

Chip and Pin is broken
The problem is that the terminal isn't validating the PIN against anything it can trust... it's sending the entered PIN to the card and trusting the result returned, which can easily be spoofed. If the PIN was server-side, it could trust a results-only message... but that's not what's happening here.

But the scam is a lot like those used with regular meg stripe cards: A fake reader glued to the ATM / gas pump.

Last edited by Arty Ziff; 01-02-2011 at 07:30 PM.
 
Old 01-04-2011, 02:16 PM   #34
H_TeXMeX_H
LQ Guru
 
Registered: Oct 2005
Location: $RANDOM
Distribution: slackware64
Posts: 12,928
Blog Entries: 2

Rep: Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301Reputation: 1301
Quote:
Originally Posted by brianL View Post
I think the Black Helicopters have whisked H_TeXMeX_H away.
They did, and they kept me in a small room, and beat me and gave me all sorts of injections, and then beat me some more. I had to eat mostly rats and lick moisture that condensed on the walls of the cell. I managed to escape through a vent, and I'm back

Anyway, I guess GrapefruiTgirl was talking about a smart card and not an RFID, so if it breaks some functionality may be lost.
 
Old 01-04-2011, 02:31 PM   #35
mostlyharmless
Senior Member
 
Registered: Jan 2008
Distribution: Arch/Manjaro, might try Slackware again
Posts: 1,851
Blog Entries: 14

Rep: Reputation: 284Reputation: 284Reputation: 284
So, I'm curious about the fatal "accident" that disabled the chip. Was it the H_TeXMeX_H solution, or did it get gnawed by a rabbit?
 
Old 01-04-2011, 02:58 PM   #36
GrapefruiTgirl
LQ Guru
 
Registered: Dec 2006
Location: underground
Distribution: Slackware64
Posts: 7,594

Original Poster
Rep: Reputation: 556Reputation: 556Reputation: 556Reputation: 556Reputation: 556Reputation: 556
Heh. I accidentally jammed my fingernail into the chip indentation a bunch of times, from each side of the card. I could hear stuff crunching, I think it was little tiny wires snapping. Soon after, the external contact pads began delaminating off of the card. :-}
 
Old 01-04-2011, 03:32 PM   #37
zer0signal
Member
 
Registered: Oct 2010
Location: Cleveland
Distribution: Slackware, Fedora, RHEL (4,5), LFS 6.7, CentOS
Posts: 258

Rep: Reputation: 29
2600 had a great write up on disabling the RFID chip inside the banks atm/debit card. I believe it involved a hand held hole punch. I don't remember what issue that article was in off the top of my head, but it was as recent as the past 18 months.
 
  


Reply

Tags
atm card, bank card, chip card, rfid chip



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
New ATM card contains a chip which suffered an 'accident'. Will card work in ATM? GrapefruiTgirl General 0 12-14-2010 04:49 PM
Problem Making ATM work dc740 Linux - Networking 0 04-04-2006 11:58 AM
Compiling ATM under Slackware 10.2 doesn't work dc740 Slackware 5 04-03-2006 06:31 PM
pci st ATM /ADSL card from Bewan rustic_kilo Linux - Hardware 0 12-19-2005 03:10 AM
ATM mperry1023 Linux - Networking 1 01-10-2001 07:57 PM

LinuxQuestions.org > Forums > Non-*NIX Forums > General

All times are GMT -5. The time now is 05:47 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration