Re: Citibank Tries to Suppress ATM Hacks

2003-02-23 Thread Steve Schear
At 02:50 PM 2/22/2003 -0800, Eric Cordian wrote: Declan McCullagh wrote: > The other interesting thing to note is why Citigroup permitted one > card to make $80K of withdrawals from one account (which was allegedly > closed at the time anyway) in a weekend. The answer seems to be almost > certainly

Re: Citibank Tries to Suppress ATM Hacks

2003-02-23 Thread John Young
There's much more to the case than has been published, some 28MB of it. Ready to go depending on how the secret hearing turns out. Citibank is being lured into a trap of its own making, along with Cambridge daredevils. Reminds of MPAA, RIAA and TIA, and the mongerers have more dirty tricks up thei

Re: Citibank Tries to Suppress ATM Hacks

2003-02-22 Thread Eric Cordian
Declan McCullagh wrote: > This is an interesting case, but it's not as if Citigroup is trying > to stifle academic research for the sake of stifling academic research -- > the Cambridge folks were retained as (presumably paid) defense experts > in the case. This is not to defend the prospect of a

Re: Citibank Tries to Suppress ATM Hacks

2003-02-22 Thread Declan McCullagh
On Fri, Feb 21, 2003 at 01:05:33PM -0800, Eric Cordian wrote: > Now this gets even more interesting. There is a lawsuit in the UK over a > South African couple who experienced 190 fradulent Diner's Club charges > totaling $80k in the UK while they were in South Africa. The bank is > trying to mak

Citibank Tries to Suppress ATM Hacks

2003-02-21 Thread Eric Cordian
Two Cambridge University researchers, Mike Bond and Piotr Zielinski, have devised a way to hack the hardware security modules used in ATMs and Point of Sale terminals, in order to recover a PIN in 15 tries. These sealed units read the strip on the card, do something with the account number using s