Ben (ben@EdelWeb.fr)
Thu, 6 Aug 1998 11:42:12 +0200 (MET DST)
On Thu, 6 Aug 1998, Jamen Porteus wrote:
> If the pin is not on the card why do the bank need the card back to
> change it.
> A friend had his pin changed to one of his own choice and they put the
> card in a
> stand-alone reader/writer machine. This was only connected to 240V power
[snip]
> Can anyone else relate to this experience.
> I know my girlfriend can.
> She lost $1000 from an ATM after someone stole her debit/credit card
> with only 3 possible explanations.
> 1. inside bank job
> 2. shoulder surfer got the pin, then stole the card
> 3. smart crim stole the card and decyphered the pin
4. Wrote a new PIN back on to card (see replay attack--i.e. I know the PIN
for my card so if I copy that sector onto another card I can use the
same PIN. This of course assumes that this sector is read and used
in the verification process--something I have no idea about).
Ben.
____
Ben Samman.................................................ben@edelweb.fr
Paris, France Illudium Q36 Explosive Space Modulator
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:10:55