Scientists warn of cash card weakness

Corrupt employees could exploit hardware flaws to access Pin codes internally

Written by Robert Jaques

Two Cambridge University computer scientists have warned that corrupt bank employees could exploit computer hardware flaws to gain access to cash card Pins.

According to the New Scientist, Mike Bond and Piotr Zielinski claim that the vulnerability centres on employees who could exploit weaknesses in internal banking systems.

Under normal circumstances it would take around 5,000 attempts to guess a Pin, but cash machines lock out after three attempts.

But banks' internal systems are not all protected in the same way, so an unscrupulous employee could make many more attempts to guess the code.

By using simple brute force attacks on unprotected systems inside a bank's infrastructure it could be possible to crack a Pin in just 15 attempts.

According to the scientists' research, thieves with access to banking systems using a more complex technique could harvest 14,000 Pins in one hour.

The scientists warned that the fraud could generate millions from the sale of stolen codes, or from the manufacture of cloned cards used to access the compromised bank accounts.

Tags:

Further reading

Related articles

Security expert slams PCI auditing

PCI compliance does not guarantee security   More...

Security flaw hits Symantec Enterprise Firewall

Similar issues in Cisco and Checkpoint products, NTA Monitor warns   More...

Researchers warn of chip and Pin flaws

Popular retail machines vulnerable to attack   More...

Highly critical flaw found in Microsoft Excel

Vulnerability could be exploited to compromise a user's system   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement