The security group at the University here found a flaw in the Chip and PIN system, and told the banking industry about it.
A year later, the industry body responsible for such cards, whose slogan is ‘Representing, Informing, Advancing,’ sent a notice to the University, asking that they take down the thesis of a student in the group who had published further information about it, and not to do that again, please.
Unfortunately for them, universities are not companies. Ross Anderson wrote a masterful response.
Details here.
RSS feed