SECURITY THREAT - PIN Grabbers Nab Holy Grail of Bank Card Security - GoFuckYourself.com

KRosh · 04-14-2009, 11:03 PM

This is crazy - The hackers are getting sophisticated. I always say never use your debit card with the PIN anywhere but at the bank.

Hackers have crossed into new frontiers by devising sophisticated ways to steal large amounts of personal identification numbers, or PINs, protecting credit and debit cards, says an investigator. The attacks involve both unencrypted PINs and encrypted PINs that attackers have found a way to crack, according to the investigator behind a new report looking at the data breaches.....

read the whole article here ... http://blog.wired.com/27bstroke6/2009/04/pins.html

Iron Fist · 04-14-2009, 11:04 PM

OH NOES!!! Run for da hills!

KRosh · 04-14-2009, 11:07 PM

Quote:

Originally Posted by sharphead

OH NOES!!! Run for da hills!

did you read the article? they are able to hack the encrypted files. This has never been seen before.

HookUPcom · 04-14-2009, 11:07 PM

hmmm... ok, reading.

KRosh · 04-14-2009, 11:09 PM

Quote:

Originally Posted by HookUPcom

hmmm... ok, reading.

card numbers are no big deal. The consumer is not liable for charges on their card. When the hacker gets your PIN and is able to take cash out of you bank account and there is no way to prove you did not remove the money yourself, there is a problem.

Iron Fist · 04-14-2009, 11:16 PM

I know you think this is groundshaking news... but really, anything that someone tries to "secure" can be unsecured. Yes, even when they come up with a plan to implant chips in your hand to make payments, someone somewhere will come up with a scanner that will strip all your info from a simple handshake and then everyone will freak out about how easy it is to crack it.

Check your bank balances every day and report anything suspicious to your bank immediately and your covered. That is it.

KRosh · 04-14-2009, 11:27 PM

Quote:

Originally Posted by sharphead

I know you think this is groundshaking news... but really, anything that someone tries to "secure" can be unsecured. Yes, even when they come up with a plan to implant chips in your hand to make payments, someone somewhere will come up with a scanner that will strip all your info from a simple handshake and then everyone will freak out about how easy it is to crack it.

Check your bank balances every day and report anything suspicious to your bank immediately and your covered. That is it.

I don't think it is ground shaking by any means

i work in the payment space and have seen it all. I do however think it is pretty sophisticated and it will require a complete rewrite of the way the banks work with PIN's

You are not covered if someone nabs your PIN and makes a purchase with a card and withdraws your cash directly from your bank account. It will take months before the banks will sort out the missing money if they ever do

So even if you check your account everyday you may see money missing but it will be a battle to try and recover that money

ladida · 04-15-2009, 12:15 AM

Quote:

Originally Posted by KRosh

they are able to hack the encrypted files. This has never been seen before.

Sure it has not

Anything that's encrypted, can be decrypted. Either by a true decyprtion, or just by bruteforce.

KRosh · 04-15-2009, 12:42 AM

Quote:

Originally Posted by ladida

Sure it has not

Anything that's encrypted, can be decrypted. Either by a true decyprtion, or just by bruteforce.

you quoted a piece of what I said. My statement was not a "general" statement about hacking encrypted files, it was about hacking encrypted files that decipher PIN's.

.............Some of the attacks involve grabbing unencrypted PINs, while they sit in memory on bank systems during the authorization process. But the most sophisticated attacks involve encrypted PINs.

The latter attacks involve a device called a hardware security module (HSM), a security appliance that sits on bank networks and on switches through which PIN numbers pass on their way from an ATM or retail cash register to the card issuer. The module is a tamper-resistant device that provides a secure environment for certain functions, such as encryption and decryption, to occur.

the.drunk · 04-15-2009, 01:26 AM

good bye to your moneys

JFK · 04-15-2009, 02:10 AM

Quote:

Originally Posted by KRosh

card numbers are no big deal. The consumer is not liable for charges on their card. When the hacker gets your PIN and is able to take cash out of you bank account and there is no way to prove you did not remove the money yourself, there is a problem.

Hey KRosh, that was your 4444th post

LadyMischief · 04-15-2009, 05:57 AM

All my cards are chipped thank goodness, even the debit cards now.

pornguy · 04-15-2009, 06:06 AM

Quote:

Originally Posted by KRosh

card numbers are no big deal. The consumer is not liable for charges on their card. When the hacker gets your PIN and is able to take cash out of you bank account and there is no way to prove you did not remove the money yourself, there is a problem.

If the money was removed at the ATM yes there is a way to prove it. The security tapes which the banks will now be forced to keep for a longer period of time.

Next time you call the bank for anything see if you can set up a security password. That way no one can call in and ask for a wire, or even walk in and get a wire done without it.

RobertD · 04-15-2009, 06:15 AM

There was a big article in Wired about a year or so ago where they built a chip reader with about 20 bucks worth of parts from RadioShack.

.

cykoe6 · 04-15-2009, 06:15 AM

Damn. I am pretty careful with my debit card but I cannot get by without using ATMs. Obviously any security measure has a theoretical countermeasure but it seems they may want to try and do something about this soon.

RyuLion · 04-15-2009, 07:56 AM

solution = safe

tiger · 04-15-2009, 08:44 AM

Debit cards are terrible I refuse to use them. If you want it to take forever to get your money back and/or have a good chance of not getting all of it back when it is stolen use a debit card.

TXXXTN · 04-15-2009, 08:51 AM

ca$h baby!

Mr. Romance · 04-15-2009, 09:23 AM

Wow not good.

Mr. Romance

baddog · 04-15-2009, 09:28 AM

Quote:

Originally Posted by JFK

Hey KRosh, that was your 4444th post

He must have hacked my pin number.

04-14-2009, 11:03 PM	#1
KRosh So Fucking Outlawed Industry Role: Join Date: Nov 2001 Posts: 5,114	SECURITY THREAT - PIN Grabbers Nab Holy Grail of Bank Card Security This is crazy - The hackers are getting sophisticated. I always say never use your debit card with the PIN anywhere but at the bank. Hackers have crossed into new frontiers by devising sophisticated ways to steal large amounts of personal identification numbers, or PINs, protecting credit and debit cards, says an investigator. The attacks involve both unencrypted PINs and encrypted PINs that attackers have found a way to crack, according to the investigator behind a new report looking at the data breaches..... read the whole article here ... http://blog.wired.com/27bstroke6/2009/04/pins.html __________________ ICQ 115433750

04-14-2009, 11:04 PM	#2
Iron Fist Too lazy to set a custom title Join Date: Dec 2006 Posts: 23,400	OH NOES!!! Run for da hills! __________________ i like waffles

04-14-2009, 11:07 PM	#4
HookUPcom Confirmed User Join Date: Sep 2008 Location: Boulder, Colorado USA Posts: 1,235	hmmm... ok, reading. __________________ HookUP \| Adult Dating icq: 364-320-971

04-14-2009, 11:16 PM	#6
Iron Fist Too lazy to set a custom title Join Date: Dec 2006 Posts: 23,400	I know you think this is groundshaking news... but really, anything that someone tries to "secure" can be unsecured. Yes, even when they come up with a plan to implant chips in your hand to make payments, someone somewhere will come up with a scanner that will strip all your info from a simple handshake and then everyone will freak out about how easy it is to crack it. Check your bank balances every day and report anything suspicious to your bank immediately and your covered. That is it. __________________ i like waffles

04-15-2009, 01:26 AM	#10
the.drunk Confirmed User Join Date: Apr 2009 Posts: 712	good bye to your moneys __________________ find good domains : free epassporte : whitelabel webcams CONTACT ICQ 591549611

04-15-2009, 05:57 AM	#12
LadyMischief Orgasms N Such! Industry Role: Join Date: Sep 2002 Location: Oakville, Ontario Posts: 18,135	All my cards are chipped thank goodness, even the debit cards now. __________________ ICQ 3522039 Content Manager - orgasm.com [email protected]

04-15-2009, 06:15 AM	#14
RobertD Confirmed User Join Date: Feb 2001 Location: Bellingham, WA Posts: 1,149	There was a big article in Wired about a year or so ago where they built a chip reader with about 20 bucks worth of parts from RadioShack. . __________________ Sexy Latinas

04-15-2009, 06:15 AM	#15
cykoe6 Confirmed User Industry Role: Join Date: Apr 2005 Location: Vegas Posts: 4,499	Damn. I am pretty careful with my debit card but I cannot get by without using ATMs. Obviously any security measure has a theoretical countermeasure but it seems they may want to try and do something about this soon. __________________ бабки, шлюхи, сила

04-15-2009, 07:56 AM	#16
RyuLion ClubDomCash.com Industry Role: Join Date: Mar 2003 Location: San Diego Posts: 32,241	solution = safe __________________ Adult Biz Consultant A tech head since 1995

04-15-2009, 08:44 AM	#17
tiger Confirmed User Industry Role: Join Date: Apr 2002 Location: Los Angeles Posts: 6,986	Debit cards are terrible I refuse to use them. If you want it to take forever to get your money back and/or have a good chance of not getting all of it back when it is stolen use a debit card. __________________

04-15-2009, 08:51 AM	#18
TXXXTN Confirmed User Industry Role: Join Date: Mar 2009 Posts: 265	ca$h baby! __________________ i need money.

04-15-2009, 09:23 AM	#19
Mr. Romance The Face of Romance and the Symbol of Freedom Join Date: Mar 2005 Location: The America's Posts: 7,821	Wow not good. Mr. Romance __________________ Free Leads Program now paying up to $6 Gerard-Director of Global Sales Sign up Here: CamStarCash Check out: FreeCamStars ICQ: 330 662 299 gerard at freecamstars . com