Shell suspends chip and pin after £1m f raud

[Charles Lindsey]

On Sat, 06 May 2006 16:19:57 +0100, Ian Mason  
<ukcrypto@sourcetagged.ian.co.uk> wrote:

>  From http://news.bbc.co.uk/1/hi/england/4980190.stm :-
>
> Petrol firm suspends chip-and-pin
>
> Shell said the suspension of chip and pin was a temporary measure

 From other accounts I read of this incident, it seems that the Bad Guys  
captured the mag stripe information  (or enough of it to generate a viable  
clone), and then captured the PIN by tampering with the keypad. In fact,  
exactly the kind of fraud we were predicting on this list 2 years ago.

-- 
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131 Fax: +44 161 436 6133   Web: http://www.cs.man.ac.uk/~chl
Email: chl@clerew.man.ac.uk      Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9      Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5