On 13 August 2011 13:58, Martin Paljak <[email protected]> wrote:
> I have not seen the Vasco reders, but they look nice. But don't bother
> with the ACS device, you can give it to a baby to be a playphone.

Oh? Just curious, do you mean it's insecure, or badly made, or just
that the colours make it look like a baby's toy? :-)

> I don't know where to get them, but Gemalto Ezio Shield (former Todos)
> might be of interest. It also implements a "PIN firewall" meaning that
> a trojan or other malware can't use your card without your consent, as
> the reader will refuse PIN commands from the host computer.

http://pcsclite.alioth.debian.org/ccid/supported.html#0x08E60x34C0 -
it does say "No extended APDU", I don't really know if that'll be a
problem for me... anyone know if the OpenPGP v2 card is ok without
extended APDU, at least?

> Gemalto Pinpad (sold in kernelconcepts) is not really a pocket device,
> but not as bulky as some alternatives either. And it should be a
> decent reader.

You can see at 
http://pcsclite.alioth.debian.org/ccid/supported.html#0x08E60x3478
what I meant about the PIN counter: "Does send a VERIFY PIN command
with an empty PIN to get the number of remaining trials. This may be
problematic with some smart cards like the Belgian eID card that does
not support this and will decrement the counter"

Thanks,
-- 
Chris Boyle
http://chris.boyle.name/
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to