Bank-card PINs 'wide open' to insider attack
Security researchers have highlighted how corrupt bank insiders might be able to obtain bank card PINs using as little as one or two guesses.
The flaw, which involves the way ATM PINs are encrypted and transmitted across international financial networks (by switches), is far more severe than previous attacks which created a means for insiders to crack PINs using around 15 guesses. By design, it shouldn't be possible to guess a four-digit pin in less than an average of 5,000 attempts.
At The Register.
[ Read more ]