Wifi Password Recovery - UTM - Vulnerability Scanning


VIP LOUNGE
CLOUD LOGIN
Sun Sun Sun

You are here: News > News > UK man's money disappears from account, doubts placed on Europe's card security

» IT Security NEWS
 
» 23 April 2009
UK man's money disappears from account, doubts placed on Europe's card security

A man from UK is going head to head with banking corporation Halifax next week in court after he filed a case against them for the loss of £2,100 (US$3,100) from his account.

 

 

 

Alain Job, a Cameroonian immigrant, had realized that someone else had withdrawn the money from his bank account, but maintains that his card was always with him and that he was not the one who made the withdrawal. Job then decided to sue the bank over this mystery withdrawal, making it the first legal case to challenge what bank claim to be an extremely secure security system designed specifically to protect against card fraud. The hearing for Job’s case will be in Nottingham County Court on April 30.

 

 

 This case has raised doubts on the effectiveness of the chip-and-PIN system that has been introduced in Europe years ago to stem rampant card fraud. In this system, instead of using a signature to verify each transaction, the cardholder must enter a four-digit PIN which the cash machine or POS terminal compares with the data stored in the microchip embedded within the card

 

 

 

Ross Anderson is a professor of security engineering at Cambridge and a very vocal critic of the currently implemented chip-and-PIN system. He and other security researchers have outlined potential holes in the system which could have been exploited to gain access to Job’s account.

 

 

 

While cash machines have verification mechanisms checking the microchip used to make sure the card has not been cloned, the microchip can sometimes be bypassed and data can be read off the magnetic strip in certain machines.

 

 All-access “yes” cards may also be created to transact with machines with the ability to authorize transactions on its own, without connecting to the bank. It is also possible to obtain a key off a chip that can certify transactions to identify the card as legitimate even though it has been faked

 

 

 

 Halifax insists that it has evidence that Job accessed his own account with his card but would not release details. Anderson on the other hand, believes that banking companies place too much faith in the system and is trying to shift the losses of fraud away from the bank.

 


Reviews of SecPoint.com
 
 
 
 
 

Awards & Reviews
  

  


Subscribe to our Mailing List

Customer References



Encyclopedia | Free Scan Statement | Link Policy | Privacy Statement | Resources | Sitemap | User Policy
© Copyright 1999-2012: SecPoint®
SecPoint ApS Noerregade 7B - 1165 Copenhagen K - Denmark
US Toll free: +1-888-704-7297 - EU: +45-70-235-245