| Keylogging (password steelers) -someone has done it for CHIP & PIN cards!!! [message #385053] |
Sa, 06 Mai 2006 23:54 |
|
I knew this would happen!
http://news.bbc.co.uk/1/hi/england/4980190.stm
Petrol firm suspends chip-and-pin
Shell said the suspension of chip and pin was a temporary measure
Petrol giant Shell has suspended chip-and-pin payments in 600 UK petrol
stations after more than =A31m was siphoned out of customers' accounts.
Eight people, including one from Guildford, Surrey and another from
Portsmouth, Hants, have been arrested in connection with the fraud
inquiry.
The Association of Payment Clearing Services (Apacs) said the fraud
related to just one petrol chain.
Shell said it hoped to reintroduce chip-and-pin as soon as possible.
Plastic crime
The racket is being investigated by the Metropolitan Police cheque and
plastic crime unit.
"These Pin pads are supposed to be tamper resistant, they are supposed
to shut down, so that has obviously failed," said Apacs spokeswoman
Sandra Quinn.
She said Apacs was confident the problem was specific to Shell and not
a systemic issue.
A Shell spokeswoman said: "Shell's Chip & PIN solution is fully
accredited and complies with all relevant industry standards.
Chip and pin cards are designed to prevent fraud
"We have temporarily suspended chip and pin availability in our UK
company-owned service stations.
"This is a precautionary measure to protect the security of our
customers' transactions.
"You can still pay for your fuel, goods or services with your card by
swipe and signature.
"We will reintroduce chip and pin as soon as it is possible, following
consultation with the terminal manufacturer, card companies and the
relevant authorities."
Shell has nearly 1,000 outlets in the UK, 400 of which are run by
franchisees who will continue to use chip-and-pin.
BP is also looking into card fraud at petrol stations in Worcestershire
but it is not known if this is connected to chip-and-pin.
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP & PIN cards!!! [message #385055 ] |
So, 07 Mai 2006 00:04 |
|
>chris.hollund [at] yahoo.com> wrote in message
>news:1146952445.410331.51150 [at] v46g2000cwv.googlegroups.com...
>I knew this would happen!
password 'steelers'?
FFS.
--
Tumbleweed
email replies not necessary but to contact use;
tumbleweednews at hotmail dot com
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP & PIN cards!!! [message #385063 ] |
So, 07 Mai 2006 01:04 |
|
<chris.hollund [at] yahoo.com> wrote in message
news:1146952445.410331.51150 [at] v46g2000cwv.googlegroups.com...
> I knew this would happen!
Seems to be the worst of both worlds, nabbing the stripe and logging the
pin. The sooner cash point cards stop accepting magstripe, the better.
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP& PIN cards!!! [message #385084 ] |
So, 07 Mai 2006 10:17 |
|
Virgils Ghost wrote:
> Seems to be the worst of both worlds, nabbing the stripe and logging the
> pin. The sooner cash point cards stop accepting magstripe, the better.
Which isn't going to happen anytime soon. You have to remember the
thousands of ATM's abroad. I bet few in the US can read the chip this
decade.
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP & PIN cards!!! [message #385099 ] |
So, 07 Mai 2006 13:25 |
|
> Virgils Ghost wrote:
> > Seems to be the worst of both worlds, nabbing
> > the stripe and logging the pin. The sooner cash
> > point cards stop accepting magstripe, the better.
>
"Colin Forrester" wrote
> Which isn't going to happen anytime soon. You
> have to remember the thousands of ATM's abroad.
> I bet few in the US can read the chip this decade.
What proportion of *UK*-card related
ATM fraud happens abroad?
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP & PIN cards!!! [message #385100 ] |
So, 07 Mai 2006 13:28 |
|
On Sun, 07 May 2006 09:17:21 +0100, Colin Forrester
<colin [at] thefrogslepthere.com> wrote:
>Virgils Ghost wrote:
>
>> Seems to be the worst of both worlds, nabbing the stripe and logging the
>> pin. The sooner cash point cards stop accepting magstripe, the better.
>
>Which isn't going to happen anytime soon. You have to remember the
>thousands of ATM's abroad. I bet few in the US can read the chip this
>decade.
Does anyone know if the UK Chip & PIN implementation was carried out
in accordance with any internationally agreed standard, or is it
something proprietary, put together by the UK credit card companies
themselves?
I know similar systems are in use in other countries, but I don't know
if they are compatible with UK cards to the extent that it would
eventually allow interoperability between the systems.
Chris
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP & PIN cards!!! [message #385103 ] |
So, 07 Mai 2006 14:11 |
|
"Chris Blunt" <chris_blunt [at] spamfence.net> wrote in message
news:d2mr525h9otsavd98hib8j84uqfavsn5ra [at] 4ax.com...
> On Sun, 07 May 2006 09:17:21 +0100, Colin Forrester
> <colin [at] thefrogslepthere.com> wrote:
>
>>Virgils Ghost wrote:
>>
>>> Seems to be the worst of both worlds, nabbing the stripe and logging the
>>> pin. The sooner cash point cards stop accepting magstripe, the better.
>>
>>Which isn't going to happen anytime soon. You have to remember the
>>thousands of ATM's abroad. I bet few in the US can read the chip this
>>decade.
>
> Does anyone know if the UK Chip & PIN implementation was carried out
> in accordance with any internationally agreed standard, or is it
> something proprietary, put together by the UK credit card companies
> themselves?
>
> I know similar systems are in use in other countries, but I don't know
> if they are compatible with UK cards to the extent that it would
> eventually allow interoperability between the systems.
>
> Chris
AFAICR its european-wide, and the US doesnt have any plans at all to
introduce a C&P-type system.
--
Tumbleweed
email replies not necessary but to contact use;
tumbleweednews at hotmail dot com
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP& PIN cards!!! [message #385105 ] |
So, 07 Mai 2006 14:20 |
|
Tim wrote:
>> Which isn't going to happen anytime soon. You
>> have to remember the thousands of ATM's abroad.
>> I bet few in the US can read the chip this decade.
>
> What proportion of *UK*-card related
> ATM fraud happens abroad?
I don't know - but if I was going to perpetrate the fraud I would get
the mag strip and PIN established in the UK - and then use the cloned
card and the PIN in a Country where I knew the ATM's didn't read chips.
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP & PIN cards!!! [message #385121 ] |
So, 07 Mai 2006 19:33 |
|
>AFAICR its european-wide, and the US doesnt have any plans at all to
>ntroduce a C&P-type system
Well they certainly have similar machines where you put your pin in
Buying petrol (sorry, 'gas') you normally put your card in at the pump
but cannot remember if you put your pin in as well.
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP& PIN cards!!! [message #386432 ] |
Mo, 08 Mai 2006 07:01 |
|
whitely525 [at] yahoo.co.uk wrote:
>> AFAICR its european-wide, and the US doesnt have any plans at all to
>> ntroduce a C&P-type system
>
> Well they certainly have similar machines where you put your pin in
>
> Buying petrol (sorry, 'gas') you normally put your card in at the pump
> but cannot remember if you put your pin in as well.
Yes, mag strip and PIN - like all UK ATM's used to be.
|
|
|
| Re: Keylogging (password steelers) -someone has done it for CHIP& PIN cards!!! [message #386478 ] |
Mo, 08 Mai 2006 20:44 |
|
Colin Forrester wrote:
> whitely525 [at] yahoo.co.uk wrote:
>>> AFAICR its european-wide, and the US doesnt have any plans at all to
>>> ntroduce a C&P-type system
>>
>> Well they certainly have similar machines where you put your pin in
>>
>> Buying petrol (sorry, 'gas') you normally put your card in at the pump
>> but cannot remember if you put your pin in as well.
>
> Yes, mag strip and PIN - like all UK ATM's used to be.
You don't need your PIN, at least not at my local Tesco, you just put
your card in.
--
------------------------------------------------------------ -----------
To reply to me directly:
Replace privacy.net with: totalise DOT co DOT uk and replace me with
gareth.harris
|
|
|
