Enter that PIN and possibly kiss your cash goodbye

tyler811

Diamond Member
Jan 27, 2002
5,385
0
71
Text



Israeli company says it has found a weakness in the system. Bankers say its not a problem
 

JS80

Lifer
Oct 24, 2005
26,271
7
81
ummm, wouldn't you need direct access to the hardware? this seems a bit far fetched.
 

Atheus

Diamond Member
Jun 7, 2005
7,313
2
0
"Bank industry officials point out that the attacks must be carried out by someone with direct access to an ATM switch, limiting the potential for abuse. But Litan said the limitation is hardly reassuring."

While the discovery is a bit concerning, the above indicates the implementation would be difficult, and ATMs are not alone in being vulnerable to this type of attack. If you are a trusted man-in-the-middle you can sniff bank details off the internet, the phone system, even the snail mail postal system. Hell, for the last 2 you don't even need to break any encryption.