- Home /
- News /
- 2010 /
- February /
- CHIP & PIN: Article by Steven J. Murdoch, Saar Drimer, Ross Anderson, Mike Bond: University of Cambridge, Computer Laboratory, Cambridge, UK: Chip and PIN is broken
CHIP & PIN: Article by Steven J. Murdoch, Saar Drimer, Ross Anderson, Mike Bond: University of Cambridge, Computer Laboratory, Cambridge, UK: Chip and PIN is broken
01 February 2010
Chip and PIN is broken (pdf):
"In this paper we describe and demonstrate a protocol flaw which allows criminals to use a genuine card to make a payment without knowing the card’s PIN, and to remain undetected even when the merchant has an online connection to the banking network... and exposes the need for further research to bridge the gap between the theoretical and practical security of bank payment systems."