4 ms·
You wouldn't depend on technical know-how, you'd roll it into a card or something like that. Chip & pin cards already do all of this. And I'm not aware of any
by sliverstorm 9y ago
You wouldn't depend on technical know-how, you'd roll it into a card or something like that. Chip & pin cards already do all of this.
And I'm not aware of any system suitable to replace SSN that can withstand rubber hose attacks. That's where law enforcement & the justice department will have to step in, as always.
- random023987 9y ago> You wouldn't depend on technical know-how, you'd roll it into a card or something like that. Chip & pin cards already do all of this. https://arstechnica.com/tech-policy/2015/10/how-a-criminal-ring-defeated-the-secure-chip-and-pin-credit-cards/ https://arstechnica.com/tech-policy/2015/10/how-a-criminal-r...
- snuxoll 9y agoThis attack doesn’t work with smart cards that basically do nothing but act as a HSM. The MITM attack works with a loophole in some EMV cards because the card isn’t signing a transaction request but just saying “PIN is good!” If your card holds a private key and won’t sign anything without also being fed a correct PIN you’d need a proper exploit of the application on the card to defeat it.