Insecurity of Chip and PIN - on Newsnight tonight

Ross Anderson ukcrypto at chiark.greenend.org.uk
Tue, 26 Feb 2008 18:35:58 +0000


Newsnight tonight will feature the latest attacks we've found on Chip
and PIN.

We found that terminals that were supposedly `Common Criteria
Evaluated' and certified by Visa were easy to penetrate. The banks are
in denial as usual.

Our academic paper, which has been accepted for Oakland:

  http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-711.pdf

The Newsnight web page:

  http://news.bbc.co.uk/1/hi/programmes/newsnight/7265437.stm

Frequently asked questions and other links:

  http://www.cl.cam.ac.uk/research/security/projects/banking/ped/

and finally our press release:

  http://www.cl.cam.ac.uk/research/security/projects/banking/ped/press-release.html

Ross