4 ms·
Ross Anderson's Blackhat talk, "How Smartcard Payment Systems Fail", has some awesome details about this. See e.g. 26 minutes in for the No-Pin attack. [0] htt
by guitarbill 6y ago
Ross Anderson's Blackhat talk, "How Smartcard Payment Systems Fail", has some awesome details about this. See e.g. 26 minutes in for the No-Pin attack.
[0] https://www.youtube.com/watch?v=ET0MFkRorbo https://www.youtube.com/watch?v=ET0MFkRorbo
- mavhc 6y agoWhy is checking my email more secure than paying for something online? Why are we still using usernames (credit card numbers) and maybe a 14 bit password (pin)? The merchant should give the user a signed request for money, which the user's account signs and the money is transferred.