Game over for Chip and PIN?

Game over for Chip and PIN?

Researchers at the University of Cambridge have managed to hack a so-called tamper resistant Chip and PIN terminal and get it to play Tetris.

Security researchers Steven Murdoch and Saar Drimer managed to get a version of Tetris working on the terminal by replacing most of the unit's internal electronics. But the hacking illustrates how fraudsters may be able to physically modify terminals.

The researchers made a short video of the hack attack, which they released via YouTube:

In a Web blog written by the researchers, Drimer says even a perfect tamper resistant terminal will only ensure that the device cannot communicate with a bank once opened. It does not prevent anyone from replacing a terminal's hardware and presenting it to customers as legitimate in order to collect card numbers and PINs.

Comments: (0)