The following message is a courtesy copy of an article that has been posted to bit.listserv.ibm-main,alt.folklore.computers as well.
Howard Brazee <[email protected]> writes: > The question is - are they secure enough? It takes more work to > clone a chip card, but do crooks who have the technology to use > mag-strip cards have access to the technology to use chip cards? I > don't know the answer. re: http://www.garlic.com/~lynn/2010.html#71 Korean bank Moves back to Mainframes (...no, not back) http://www.garlic.com/~lynn/2010.html#72 Korean bank Moves back to Mainframes (...no, not back) the compromise of terminal or machine to skim data ... whether magstripe or chip ... was nearly identical. the cost of magstripe cards is several cents less than chipcards used for "yes cards" ... but that is relatively minor compared to the compromise effort to skim&collect the data ... as well as the avg. fraud ROI per counterfeit card. as referenced in the cartes2002 presentation ... it was trivial to create a counterfeit "yes card" ... and the technology and description was readily available on the internet thru the later half of the 90s. after having done work with small client/server startup (the startup also had invented this technology called "SSL" that they wanted to use) for payment transactions and what is now comingly called "electronic commerce" ... in the mid-90s we were invited to participate in the x9a10 financial standard working group ... which had been given the requirement to preserve the integrity of the financial infrastructure for all retail payments. The "yes card" kind of exploit was one of the early, easily identifed vulnerabilities by the x9a10 standard working group (long before any kind of actual deployment of that technology) -- 40+yrs virtualization experience (since Jan68), online at home since Mar1970 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
