[Cryptography] Insecure Chip 'n' PIN starts tomorrow

[Tony Arcieri]

On Thu, Oct 1, 2015 at 5:27 AM, Phillip Hallam-Baker <phill at hallambaker.com>
wrote:

> Are there any attacks against EMV that don't involve using the payment
> mechanisms that only require the card number?
>

Yes, there is a rich history of attacks on EMV, e.g.:

http://sec.cs.ucl.ac.uk/users/smurdoch/papers/oakland14chipandskim.pdf
http://krebsonsecurity.com/2015/04/revolution-crimeware-emv-replay-attacks/

-- 
Tony Arcieri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20151001/b4748ffa/attachment.html>