Would you like a PIN with your chips?

The security group at the University here found a flaw in the Chip and PIN system, and told the banking industry about it.

A year later, the industry body responsible for such cards, whose slogan is ‘Representing, Informing, Advancing,’ sent a notice to the University, asking that they take down the thesis of a student in the group who had published further information about it, and not to do that again, please.

Unfortunately for them, universities are not companies. Ross Anderson wrote a masterful response.

Details here.

Leave a Reply

© Copyright Quentin Stafford-Fraser