And those tricks, dear Lee are why the banks are starting to use those pesky little Credit/Debit Card readers you are pissed off about.
Since the authentication number generated is different each time, intercepting one does not enable the criminal to generate new authentication numbers to do illicit bank transfers after the interception.
What I don't understand is, those card readers are all the same. So if you reverse engineer one to get the number generating algorithm, and you know someone's card number, surely you can generate an authenticated number at will?
Hi everyone.
Quote: Raymond Terrific @ May 20 2013, 10:21 PM BSTWhat I don't understand is, those card readers are all the same. So if you reverse engineer one to get the number generating algorithm, and you know someone's card number, surely you can generate an authenticated number at will?
I think the algorithm is actually in the chip on the credit/debit card and even the little card reader does not know it, and the algorithm is almost certainly different for each Bank.
Ahh that makes sense, so you need more than the card reader and the card number, you need the card itself. The card probably contains a salt for the hashing algorithm rather than an algorithm itself.
Quote: Raymond Terrific @ May 21 2013, 1:32 AM BSTAhh that makes sense, so you need more than the card reader and the card number, you need the card itself. The card probably contains a salt for the hashing algorithm rather than an algorithm itself.
If the system is compromised the card issuers can just issue new cards to the customers & the leak is closed, so there may be more than just a salt.
The chip on the card can do calculations.
Chips, salt?
Yet no vinegar.
Bloody banks!
No vinegar but plenty of bitterness!
Well I don't start threads anymore about 1 or 2 a week.So what do you think of that?
It is most pleasing!
Quote: zooo @ May 21 2013, 10:07 PM BSTIt is most pleasing!
Zooo, I have just caught up on the last ten pages of the Doctor Who Thread.
Can you make me sane again please?
It's a bit cold turkey David for my liking.
Quote: Rob H @ May 21 2013, 10:13 PM BSTZooo, I have just caught up on the last ten pages of the Doctor Who Thread.
Can you make me sane again please?
Go and read the first 10. When we were all bright eyed and happy. Probably.
Quote: zooo @ May 21 2013, 10:23 PM BSTGo and read the first 10. When we were all bright eyed and happy. Probably.
I've read them. I've read them all.
I should probably watch an episode of Dr Who at some point.
