3 ms·
I am not suggesting, I am asking. Banks issue chip & pin cards all the time. These guys already breached a bank. I'd guess programming chip & pin cards will cos
by woobar 13y ago
I am not suggesting, I am asking. Banks issue chip & pin cards all the time. These guys already breached a bank. I'd guess programming chip & pin cards will cost thieves more than magstripe cards, but is doable.
Also, you keep insisting that if USA adopted EMV, this would not have happened. But this operation was global, thieves used ATMs in Russia, Japan, Britain, and Canada among others.
- JimmaDaRustla 13y agoNot every machine has enabled it yet, but the merchant services provider is responsible for the damages of not facilitating the chip card. This operation would not have been as successful if the only ATMs available were the off-branded machines found in the corner of bars. To answer your question though, I guess it would be possible, but they would need to skim the card data RIGHT at the time of card production in the personalization machine as it holds the proper encryption keys - nearly impossible. Banks typically don't do their own manufacturing (I don't know of any bank that does) and these systems are typically disconnected. This is worlds apart from what they actually did - dumping or generating mag stripe data, including the PIN Offset and writing the data onto cards like library cards, or hotel room cards. In addition, with EMV, the card is encrypted and verified using the issuer's public key, as well as the Certificate Authority's public key. Even further, Visa/Mastercard have their own multi-tier encryption that gets applied to the cards. I'm really getting over my head in the manufacturing process, but it is incredibly more complicated and secure than the old mag stripe days.