funsec mailing list archives

Re: How heavy is a chip?


From: Dave Paris <dparis () w3works com>
Date: Thu, 22 Jul 2010 00:54:47 +0000

o_O   let's see .. nope.  weighing is a practical impossibility due to 
manufacturing variances being larger than the weight of circuitry.  Visa 
Fail.  If if manufacturing tolerances are sufficiently tight, that'd 
require a damn sensitive scale to detect some very small circuit additions!

The shimming thing is just plain scary.

On 7/22/2010 12:52 AM, Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote:
Interesting juxtaposition of news items.  A week or so ago, Visa recommended
weighing card readers, in order to detect those that had been tampered with.

http://www.h-online.com/security/news/item/Visa-recommends-weighing-
card-readers-to-detect-tampering-1035293.html

A couple of days later, saw a report on the latest ATM skimming scam: shimming.
  This is when the bad guys insert their own chip, that sits on top of the contact
pad for "chip and pin" cards:

http://www.networkworld.com/community/node/63544

======================  (quote inserted randomly by Pegasus Mailer)
rslade () vcn bc ca     slade () victoria tc ca     rslade () computercrime org
An optimist believes we live in the best of all possible worlds.
                       A pessimist fears this is true.
victoria.tc.ca/techrev/rms.htm blog.isc2.org/isc2_blog/slade/index.html
http://blogs.securiteam.com/index.php/archives/author/p1/
http://www.infosecbc.org/links http://twitter.com/rslade
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: