Chip & PIN is definitely broken

Presented at Black Hat USA 2011, Aug. 4, 2011, 4:45 p.m. (75 minutes)

Credit Card skimming and PIN harvesting in an EMV world. We analyze the practicality of credit card information skimming, cloning and PIN harvesting on Chip & PIN enabled POS terminals. We intentionally ignore Magstripe skimming (which is still effective and widely used) and focus on the chip interface.

Presenters:

• Daniele Bianco
• Andrea Barisani
• Zac Franken
• Adam Laurie / Major Malfunction   as Adam Laurie

Links:

• https://www.blackhat.com/html/bh-us-11/bh-us-11-archives.html#Laurie
• https://media.blackhat.com/bh-us-11/Laurie/BH_US_11_Laurie_Chip_Pin-Slides.pdf
• https://media.blackhat.com/bh-us-11/Laurie/BH_US_11_Laurie_Chip_Pin-WP.pdf

Similar Presentations:

• DEF CON 19 (2011) / Chip & PIN is Definitely Broken
• DEF CON 23 (2015) / Goodbye Memory Scraping Malware: Hold Out Till "Chip And Pin"
• 31C3 (2014) / Practical EMV PIN interception and fraud detection