Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

20,000 Irish bank card numbers cloned and in the wild

  • 18-08-2008 8:19am
    #1
    probe
    Closed Accounts Posts: 2,055 ✭✭✭


    http://www.examiner.ie/irishexaminer/pages/story.aspx-qqqg=ireland-qqqm=ireland-qqqa=ireland-qqqid=70122-qqqx=1.asp

    The banks are responding by putting a ceiling of €100 on ATM transactions. While this is an understandable temporary measure, they don't have to impose this limit on ATM transactions where the EMV chip is authenticated during the authorization process.

    They can only clone the magnetic stripe. The value of the EMV chip seems to be totally lost on Irish banks and retailers. Retailers in Ireland continue to skim the magnetic stripe of EMV cards. Customers stupidly allow retailers to skim their cards. If the customer insisted on inserting their chip card into the retailer's chip reader - skimming at the point of sale would be impossible. The banks and data protection authorities should be advising cardholders not to part with possession of their cards to retail staff to make the EMV chip system work as it was designed.

    It is going to cost a fortune to replace all the payment cards that have been processed by suspect retailers. That cost will be passed on to bank customers one way or another. Add to that the inconvenience of having to notify replacement card numbers to service providers. Gross incompetence all around!

    .probe


Comments

  • #2
    Gavin
    Registered Users, Registered Users 2 Posts: 4,676 ✭✭✭Gavin


    Not even the chip is completely secure.
    http://www.lightbluetouchpaper.org/2007/02/06/chip-pin-relay-attacks/


  • #3
    probe
    Closed Accounts Posts: 2,055 ✭✭✭probe


    Verb wrote: »
    Not even the chip is completely secure.
    http://www.lightbluetouchpaper.org/2007/02/06/chip-pin-relay-attacks/

    That problem only arises with the non-DDA EMV (ie SDA) cards used in Britain. I would be very surprised if the Irish banks copied the British banks in issuing non-DDA cards (ie cards that use static signatures, that never vary and are therefore copyable. :-) There is no logic to using EMV cards where everything can be copied to another card as described in the article you refer to. The card issuer might just as well keep using magnetic stripe cards!

    The DDA cards store an encryption key that generates a unique signature, for each transaction. This signature is read by the point-of-sale terminal, which has a corresponding encryption key, so a transaction from a counterfeit card will be detected.

    Card issuers in France, Germany, Sweden, Austria, Israel, Indonesia, and Japan, among others are using DDA cards.

    .probe


Advertisement