2 ms·
I'm not familiar with the US system, but here in Canada you're not even supposed to get the PIN in the first place. The keypad is supposed to encrypt it and use
by astrodust 13y ago
I'm not familiar with the US system, but here in Canada you're not even supposed to get the PIN in the first place. The keypad is supposed to encrypt it and use it for one transaction only. Then that information is discarded.
Storing PINs in any form is absolutely insane. People deserve to get fired for this.
- dlubarov 13y agoIt's the same here - pins must be encrypted by a tamper-resistant hardware pin pad (in this case Verifone's). I don't think Target was storing pins, which is prohibited regardless of encryption. It sounds like the attackers sniffed encrypted pins.