equal
deleted
inserted
replaced
119 mechanism (the amount of reliance we can put on the mechanism) |
119 mechanism (the amount of reliance we can put on the mechanism) |
120 and finally the incentives (the motive that the people |
120 and finally the incentives (the motive that the people |
121 guarding and maintaining the system have to do their job |
121 guarding and maintaining the system have to do their job |
122 properly, and also the motive that the attackers have to try |
122 properly, and also the motive that the attackers have to try |
123 to defeat your policy). The last point is often overlooked, |
123 to defeat your policy). The last point is often overlooked, |
124 but plays an important role. To illustrate this lets look at |
124 but plays an important role. To illustrate this let's look at |
125 an example. |
125 an example. |
126 |
126 |
127 \subsubsection*{Chip-and-PIN is Surely More Secure, No?} |
127 \subsubsection*{Chip-and-PIN is Surely More Secure, No?} |
128 |
128 |
129 The questions is whether the Chip-and-PIN system used with |
129 The questions is whether the Chip-and-PIN system used with |
228 If you want to watch an entertaining talk about attacking |
228 If you want to watch an entertaining talk about attacking |
229 Chip-and-PIN cards, then this talk from the 2014 Chaos |
229 Chip-and-PIN cards, then this talk from the 2014 Chaos |
230 Computer Club conference is for you: |
230 Computer Club conference is for you: |
231 |
231 |
232 \begin{center} |
232 \begin{center} |
233 \url{https://www.youtube.com/watch?v=XeZbVZQsKO8} |
233 \url{https://goo.gl/zuwVHb} |
234 \end{center} |
234 \end{center} |
235 |
235 |
236 \noindent They claim that they are able to clone Chip-and-PINs |
236 \noindent They claim that they are able to clone Chip-and-PINs |
237 cards such that they get all data that was on the Magstripe, |
237 cards such that they get all data that was on the Magstripe, |
238 except for three digits (the CVV number). Remember, |
238 except for three digits (the CVV number). Remember, |