On Fri, Jan 1, 2010 at 8:29 PM, Pavol Luptak <[email protected]> wrote: > On Thu, Dec 31, 2009 at 12:29:29AM +0300, Alexander Chemeris wrote: >> >> Guys, there is more fun here. Many ATMs (at least in Russia) use >> GPRS/EDGE modems to send data to banks. I doubt they use > > This is also true for Slovakia and I believe for other countries in EU.
In The Netherlands many companies have card payment systems which can communicate with the payment provider through GPRS; in some cases just as a backup when the main line fails. While the system hopefully uses SSL, the devices might not be sophisticated enough to do proper certificate checking or have other flaws allowing them to be exploited using a man in the middle attack. That's a bit out of scope for the A5/1 cracking project, but still something that could have big implications. Regards, Mark _______________________________________________ A51 mailing list [email protected] http://lists.lists.reflextor.com/cgi-bin/mailman/listinfo/a51
