Re: Cheap pinpad smart card reader with "PIN firewall"
Martin Paljak <[email protected]>
| Newsgroups | gmane.comp.encryption.opensc.devel,gmane.comp.lib.muscle |
|---|---|
| Message-ID | <CACsm3DX59mhKWJJnu1UwzNyT9V=Oh4QjiDGuDvDKBXor1diJbQ@mail.gmail.com> |
On Wed, Oct 16, 2013 at 2:22 PM, <[email protected]> wrote: > (From BB) > I wonder, how far are they compatible? > With most pinpad readers, you can enter your PIN either from the Ppad, or from your normal keyboard. > > It seems (!) That with the ct710 you are forced to use the pinpad (protection against sloppy users/keyloggers) It doesn't seem so but actually is so. The only way to send PIN commands is through the pinpad. This effectively blocks most malware from accessing keys which require user consent through PIN entry. It is still possible to trick an unaware user into revealing a PIN by prompting for it, but it will still be virtually impossible to activate such key with the stolen PIN. -- Martin +372 515 6495 ------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk