4 ms·
> It probably happens regularly on a smaller scale. It does. Ross Anderson's Security Engineering describes how UK banks had customers prosecuted for fraud af
by masfuerte 2y ago
> It probably happens regularly on a smaller scale.
It does. Ross Anderson's Security Engineering describes how UK banks had customers prosecuted for fraud after criminals exploited bugs in chip-and-pin terminals to complete transactions without entering a PIN. The banks also successfully argued that their cryptographic transaction logs (which could definitively prove if a PIN was used) should not be admitted as evidence.
- graemep 2y agoI knew about the banks attempt to prevent him publishing the flaws but I did not know they had prosecuted customers.
- masfuerte 2y agoSection 10.4.3 has an older example where a customer was prosecuted for someone else's ATM fraud: https://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf https://www.cl.cam.ac.uk/~rja14/Papers/SEv2-c10.pdf I can't find the details about the chip-and-pin case. They might have been on Anderson's blog rather than in the book.