Plays via YouTube's privacy-enhanced embed

Chip & PIN Fraud Explained - Computerphile

Name: Chip & PIN Fraud Explained - Computerphile
Description: Computerphile interview with Prof. Ross Anderson on how Chip and PIN payment systems are being compromised, and the attacks researchers have seen.

Computerphile

21 videos recommended on HN

YouTube

2 HN users recommended this explainer2 months2015–2018 score 2

Years with an HN recommendation, 2007–2026

HN points to it as a good overview of Chip and PIN attacks and the consumer-liability downsides.

Computerphile interview with Prof. Ross Anderson on how Chip and PIN payment systems are being compromised, and the attacks researchers have seen.

“This is a good overview by some researchers in the different ways Chip and Pin can be hacked.” (HN, 2015)

2 recommendations · 1 citations · Explainers · partly dated

Security & hacking Cryptography Explainers Systems, Networks & Security

3 Hacker News comments

From the HN archive; up to 20 kept per video, favoring different commenters. Recommendations first.

@bardworx Oct 2015 Recommends

on HN thread X-Ray Scans Expose Chip-And-Pin Card Hack

This is a good overview by some researchers in the different ways Chip and Pin can be hacked. This explains this hack as well. [this video]

Overview of ways Chip and Pin can be hacked.

View on Hacker News

@Crosseye_Jack Sep 2018 Recommends

on HN thread Fear the reaper: characterization and fast detection of card skimmers

One trick (which I believe has been fixed) is not so much a replay attack but a multiple transaction attack. A modified terminal makes multiple transactions on the card while the card is still in the terminal, coupled with another attack that modified what was presented on the screen of the terminal could turn a single $5 transaction to 3 $500 transactions. The video is 3 years old now but still worth a watch discussing the attacks they have seen on Chip and Pin - [this video]

Discusses observed attacks on Chip and Pin.

View on Hacker News

Citations, criticism and jokes

@Matt3o12_ Jun 2016 Cites it

on HN thread ‘Stop using paper checks,’ says agency in charge of them

I want to have a system which protects me from money loss (through my own fault, a malicious third party, or my bank's fault). I don't care how as long as I'm protected. With Chip-and-PIn cards, I'm not protected because I have to proof that it was not my fault (which can be incredible difficult to do). So, I personal prefer cards that require a signature. It doesn't matter to me if it has a chip or not (the chip has nothing to do with the pin, there are also chip-and-signature cards and cards that support both. The chip makes it hard to physically clone the card). If you are interested in the downsides of the new pin card, checkout this video: [this video] So, if zero authentication means that I am not liable for financial damages, I'm happy with it but I wouldn't bother to use a pin if I had the same liability. Unfortunately, the pin adds laughable authentication which makes me liable for many types of fraud (see the video).

Explains downsides of PIN cards for consumer liability.

View on Hacker News