Security Failures in Smart Card Payment Systems (25c3)
Tampering the Tamper-Proof
An episode of the Chaos Computer Club - 25C3: nothing to hide (ogg) podcast, hosted by Steven J. Murdoch, titled "Security Failures in Smart Card Payment Systems (25c3)" was published on December 27, 2008 and runs 58 minutes.
December 27, 2008 ·58m · Chaos Computer Club - 25C3: nothing to hide (ogg)
Summary
PIN entry devices (PED) are used in the Chip & PIN (EMV) system to process customers' card details and PINs in stores world-wide. Because of the highly sensitive information they handle, PEDs are subject to an extensive security evaluation procedure. We have demonstrated that the tamper protection of two popular PEDs can be easily circumvented with a paperclip, some basic technical skills, and off-the-shelf electronics. about this event: http://events.ccc.de/congress/2008/Fahrplan/events/2953.en.html