Don't keep purchasing at the same merchants; that's like Carder 101!
I know! It's the stupid details and extra people they bring in that seems to eventually get these rings caught.
Surely they could have e.g. had the card sign a challenge in a way it could only do if given the right PIN?
Well, the article seemed to imply the chip put in the CC was from a different card, so maybe they know the pin for that chip, and the MITM is really about the authentication of the chip in the wrong card? Later they do seem to imply the fix was to authenticate the chip, but I'm not sure without reading the original paper if that's an over-simplification of what the fix was, and maybe it's better authentication of the chip.
Comments
I know! It's the stupid details and extra people they bring in that seems to eventually get these rings caught.
Well, the article seemed to imply the chip put in the CC was from a different card, so maybe they know the pin for that chip, and the MITM is really about the authentication of the chip in the wrong card? Later they do seem to imply the fix was to authenticate the chip, but I'm not sure without reading the original paper if that's an over-simplification of what the fix was, and maybe it's better authentication of the chip.