Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

20,000 Irish bank card numbers cloned and in the wild

  • 18-08-2008 09:19AM
    #1
    probe
    Closed Accounts Posts: 2,055 ✭✭✭


    http://www.examiner.ie/irishexaminer/pages/story.aspx-qqqg=ireland-qqqm=ireland-qqqa=ireland-qqqid=70122-qqqx=1.asp

    The banks are responding by putting a ceiling of €100 on ATM transactions. While this is an understandable temporary measure, they don't have to impose this limit on ATM transactions where the EMV chip is authenticated during the authorization process.

    They can only clone the magnetic stripe. The value of the EMV chip seems to be totally lost on Irish banks and retailers. Retailers in Ireland continue to skim the magnetic stripe of EMV cards. Customers stupidly allow retailers to skim their cards. If the customer insisted on inserting their chip card into the retailer's chip reader - skimming at the point of sale would be impossible. The banks and data protection authorities should be advising cardholders not to part with possession of their cards to retail staff to make the EMV chip system work as it was designed.

    It is going to cost a fortune to replace all the payment cards that have been processed by suspect retailers. That cost will be passed on to bank customers one way or another. Add to that the inconvenience of having to notify replacement card numbers to service providers. Gross incompetence all around!

    .probe


Comments

  • #2
    Gavin
    Registered Users, Registered Users 2 Posts: 4,660 ✭✭✭Gavin


    Not even the chip is completely secure.
    http://www.lightbluetouchpaper.org/2007/02/06/chip-pin-relay-attacks/


  • #3
    probe
    Closed Accounts Posts: 2,055 ✭✭✭probe


    Verb wrote: »
    Not even the chip is completely secure.
    http://www.lightbluetouchpaper.org/2007/02/06/chip-pin-relay-attacks/

    That problem only arises with the non-DDA EMV (ie SDA) cards used in Britain. I would be very surprised if the Irish banks copied the British banks in issuing non-DDA cards (ie cards that use static signatures, that never vary and are therefore copyable. :-) There is no logic to using EMV cards where everything can be copied to another card as described in the article you refer to. The card issuer might just as well keep using magnetic stripe cards!

    The DDA cards store an encryption key that generates a unique signature, for each transaction. This signature is read by the point-of-sale terminal, which has a corresponding encryption key, so a transaction from a counterfeit card will be detected.

    Card issuers in France, Germany, Sweden, Austria, Israel, Indonesia, and Japan, among others are using DDA cards.

    .probe


Advertisement