Comment Re:A second ATM PIN crack in NEWS today (Score 1) 410
I haven't been able to read the actual paper yet (link is slashdotted) to see if it contains more information than the post but I fail to see why you have to be an insider to perform these attacks.
Why couldn't your average cracker build any one of the many card readers from schematics found nearly anywhere on the internet. Then somehow gain access to someone's bank card (there are any number of social engineering ways to achieve this...use your imagination). Scan the card with the card reader, and store the result. Next, write software that performs the same algorithm in software that the ATM machines are executing in hardware. (i.e. Supply a entered PIN, subtract the known offset, DES encrypt the result, compare the encrypted result with the encrypted base pin from the card, start over) This would allow the cracker to avoid any lockout issues with trying too many pins and give the cracker plenty of time alone to perform the attack.
What am I missing here?
