Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Do you mean this 2010 paper: https://www.cl.cam.ac.uk/research/security/banking/nopin/oak...

Here's their blog post about it at the time (but the YouTube video is down, unfortunately): http://www. lightbluetouchpaper.org/2010/02/11/chip-and-pin-is-broken/

From the paper: "Because stolen cards can be used without knowing the PIN, by our definition, Chip and PIN is broken. We do not believe that the system is broken beyond repair, but neither is it the case that a simple fix will suffice, due to the unmanageable complexity of EMV."



They have been doing a lot of work in the area, I think 2009-2015 at least. There are several publications, and more than one attack.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: