3 ms·
The article is hugely unclear about how the author actually managed to reset the pin counter. The command Cla=80 Ins=CA P1=9F P2=17 Lc=00 means GET DATA 9F17 (P
by dfox 12y ago
The article is hugely unclear about how the author actually managed to reset the pin counter. The command Cla=80 Ins=CA P1=9F P2=17 Lc=00 means GET DATA 9F17 (PIN try counter) and has nothing to do with overwriting whatever value is stored there (the command is defined in EMV Book 3 section 6.5.7).
And also the discretionary data field on both magnetic stripe and track image data stored on chip is usually not used as "PIN Verification Value", but is either unused or used as CVC/CVV1. Even when these data were the real PVV, this information is mostly useless for deducing the PIN. (and the fact that the magstripe image stored on chip does not match the real magstripe is mostly to be expected)