SEARCH RESULTS
 
Showing 1-10 of 51 records
 
Expand article

Chip and PIN Vulnerable

2008-03-12 14:12:29 by schneier in Schneier on Security
 
...chip and PIN created new vulnerabilities. In this paper (see also the press release and FAQ ), researchers demonstrated some pretty basic attacks against the system -- one using a paper clip, a needle, and a small recording device. This BBC article is a good summary of the research And also, there's also this leaked chip and PIN report from...
 
Tags: pin, chip, pin report, pretty basic attacks, paper clip, paper, credit card signatures, trade association, bbc article
 
 
 
 
Expand article

Chip & PIN terminals vulnerable to simple attacks

The Article has images
2008-02-26 20:33:32 by Saar Drimer in Light Blue Touchpaper
...chip We also found that the certification process of these PEDs is flawed. APACS has been effectively approving PEDs for the UK market as Common Criteria (CC) Evaluated , which does not equal Common Criteria Certified (no PEDs are CC Certified). What APACS means by Evaluated is that an approved lab has performed the evaluation, but unlike CC...
 
Tags: peds, popular peds, protect cardholder data, peds processor, pin, cardholder data, data, encrypt data, governmental certification bodies
 
 
 
 
Expand article

Wee-Fi: Topless Meetings; Projects-Fi; Boston Launch; Rural-Fi; Chrysler-Fi; Wi-Fi Chip-Fi

The Article has images
2008-03-31 15:53:51 by Glennf in Wi-Fi Networking News
...chip shipments dectupled in five years; revenue quintupled: ABI Research notes that 440m Wi-Fi chipsets will ship in 2008, 10 times greater than in 2003. However, revenue is just 5 times higher, which shows how even with more advanced chips in the mix, the race to the bottom continues. Broadcom was the leading vendor in ABI's analysis
 
Tags: wi-fi, chrysler, 440m wi-fi chipsets, service, ground service, pilot project, project, term wi-fi, push service
 
 
 
 
Expand article

Hacking Mifare Transport Cards

2008-08-07 06:07:02 by schneier in Schneier on Security
 
...chip that communicates with readers mounted on the ticket barrier. That chip, the "Mifare Classic" chip, is used in hundreds of other transport systems as well Boston, Los Angeles, Brisbane, Oslo, Amsterdam, Taipei, Shanghai, Rio de Janeiro and as an access pass in thousands of companies, schools, hospitals, and government buildings around...
 
Tags: mifare, design, design secrecy, mifare classic chip, secrecy, security, secrecy supports security, security properly, chip
 
 
 
 
Expand article

Dutch RFID Transit Card Hacked

2008-01-21 06:35:43 by schneier in Schneier on Security
 
...chip, used on the normal ticket. Two German hackers, Karsten Nohl and Henryk Plotz, were able to remove the coating on the Mifare chip and photograph the internal circuitry. By studying the circuitry, they were able to deduce the secret cryptographic algorithm used by the chip. While this alone does not break the chip, it certainly gives...
 
Tags: dutch, chip, mifare classic chip, mifare chip, dutch parliament recently, circuitry, internal circuitry, secret cryptographic algorithm, statement abut
 
 
 
 
Expand article

Show 011 - An Interview with Dorothy Denning

The Article has images The Article has audio podcast
2007-02-15 22:07:35 by rmacmich in The Silver Bullet Security Podcast
...Chip controversy (which earned Dorothy the moniker clipper chick), the concept of geo-encryption, and a famous 1990 paper she wrote describing a series of interviews with malicious hackers Wikipedia: Dorothy Denning Clipper Chip ( More Clipper Chick - a 1996 Wired article about the Clipper Chip controversy The Future of Cryptography...
 
Tags: dorothy, clipper chip, clipper chip controversy, moniker clipper chick, clipper chick, malicious hackers, gary talks, sur power walk, professor
 
 
 
 
Expand article

Justice, in one case at least

2008-01-31 16:48:08 by Ross Anderson in Light Blue Touchpaper
 
...chip read). This seemed strange. If the chip of an EMV card is read, the reader will verify the signature on the certificate; if its magnetic strip is read (perhaps because the chip is unserviceable) then the bank will check the CVV, which is there to prevent magnetic strip forgery. The question therefore was whether the dash in the above...
 
Tags: card, circuit card, transaction, john, bank, transaction code, bank statement, emv card, egg
 
 
 
 
Expand article

From the Eye of a Legal Storm, Murdoch's Satellite-TV Hacker Tells All

2008-05-30 15:00:00 by Kim Zetter in Wired Security
 
...chips, he talked excitedly at lightning speed about his strange journey, which began in a top-secret Pentagon communications center, and ended with him working both sides of a heated electronic war over pay TV Satellite-TV hacker Chris Tarnovsky opens his laboratory to Threat Level reporter Kim Zetter, providing a unprecedented peek into...
 
Tags: smart cards piled, cards, nds cards, access cards, sample directv cards, directv cards, smart cards, nds smart cards, nds
 
 
 
 
Expand article

Skyhook Expands Wi-Fi Positioning to Cell, GPS

2008-06-30 10:25:33 by Glennf in Wi-Fi Networking News
 
...chips Morgan said that A-GPS (assisted GPS) already combines cell tower information with GPS. A cell phone can be told approximately where it is, and thus instead of cycling through 24 satellites, start with the two that are most directly overhead. This can reduce the time to gain a location to as little as 20 seconds, Morgan said, although...
 
Tags: gps, wi-fi, a-gps, stand-alone gps gear, gps system grab, skyhook, gps-only device, gps chips, gps radios
 
 
 
 
Expand article

Trusted path

The Article has images
2008-04-04 21:18:17 by Editor in Security x.0
...Chip and PIN based authentication for online banking. Whilst the CAP readers deployed by the UK banks can provide transaction authentication , there is still a weak link. If the user is tricked into entering incorrect details into the CAP reader then they could be inadvertently authorising a fraudulent transaction. Whilst the possibility of...
 
Tags: path, security, security protocol, strong security protocols, protocols, user, user terminals, common, attack vectors