41–50 of 53 posts
It's a nice idea (inserting the card widthways), but it's completely over-engineered. It's never going to be used as a retro-fit - it looks too much like a skimmer. In fact, if they became commonplace, it would make fitting skimmers that look like this device so much easier than trying to hide a skimmer in a discrete housing. Instead, allowing the card to be inserted widthways, and pulling it into the ATM as normal,…
Earlier quoted context omitted.
I've heard of pinhole cameras being used in card skimming operations where PIN numbers are required.
That doesn't do anything for a chip and pin card. You need the chip too.
If Blizzard can give keyfobs to gamers for auth, why cant banks include that in tech for ATMs?
More and more I think corruption and fraud are the likely reasons - those are features the establishment wants to support, not prevent... they can profit from all of it.
I don't know if the design is effective... what prevents anyone from installing a skimmer on/within this device?
Current skimmers need a horizontal swipe to read. This device requires the user to insert the card in the wrong orientation for the skimmer. The device holds onto the magnetic strip end of the card while it rotates, so it's not possible to skim after the device has performed the rotation. It's not clear how difficult or easy it is to make a skimmer that reads a card that is swiped vertically, though.
[1] http://money.howstuffworks.com/personal-finance/debt-managem...
It's a nice idea (inserting the card widthways), but it's completely over-engineered. It's never going to be used as a retro-fit - it looks too much like a skimmer. In fact, if they became commonplace, it would make fitting skimmers that look like this device so much easier than trying to hide a skimmer in a discrete housing. Instead, allowing the card to be inserted widthways, and pulling it into the ATM as normal,…
In the Netherlands they're already outfitting ATMs and other credit machines with addons on the outside. Most ATMs also display a picture on the screen of what it's supposed to look like. So no, it's not that over engineered I think. On the other hand, because of the moving parts involved it is probably going to be much more expensive. And with the current chips on the card already, I don't think the banks are going…
See here: http://blog.webwereld.nl/wp-content/uploads/2009/08/nspas.jp...
It's a nice idea (inserting the card widthways), but it's completely over-engineered. It's never going to be used as a retro-fit - it looks too much like a skimmer. In fact, if they became commonplace, it would make fitting skimmers that look like this device so much easier than trying to hide a skimmer in a discrete housing. Instead, allowing the card to be inserted widthways, and pulling it into the ATM as normal,…
It's sad, but this was my very first thought as well.
I don't know much about the mechanical implications of this, but why not move the sensor instead of the card? Put the card in longways first, halfway in. Motorized sensor moves across card to scan it. There wouldn't be enough room left over for a skimmer that would still allow the ATM to read it and even if there was a skimmer, it makes the skimmer that much more expensive, since it would have to have a motor too. I…
I agree with a comment in the story - we need a better framework that actually supports non-replayable (ie, one-time) codes being transferred. If Blizzard can give keyfobs to gamers for auth, why cant banks include that in tech for ATMs? More and more I think corruption and fraud are the likely reasons - those are features the establishment wants to support, not prevent... they can profit from all of it.
Well, banks here in Portugal do offer one-time authorization codes, either by SMS (default) or keyfob, but only for online operations, not in ATMs.
That said, a Chip and PIN solution prevents (in theory) this problem, since it can actually authenticate the transaction by providing a cryptographic signature, without ever exposing the private key to either the ATM or any skimmer.
Earlier quoted context omitted.
That doesn't do anything for a chip and pin card. You need the chip too.
Here in the uk they skim your card, create a replica and use a pinhole camera to get your pin.
