Very well for the ct710, but you wrote that it was like the "gemalto ezio shield".
Could it be that it is only enforced by the (estonian) ct710, but not by others, like the ezio-shield?
Hw
----- Oorspronkelijk bericht -----
Van: Martin Paljak [mailto:[email protected]]
Verzonden: Wednesday, October 16, 2013 02:08 PM W. Europe Standard Time
Aan: Witvliet, J, CDC/IV/DCOPS/I&S/HIN
Cc: MUSCLE <[email protected]>; OpenSC-devel <[email protected]>
Onderwerp: Re: [Opensc-devel] Cheap pinpad smart card reader with "PIN firewall"
On Wed, Oct 16, 2013 at 2:22 PM, <[email protected]> wrote:
> (From BB)
> I wonder, how far are they compatible?
> With most pinpad readers, you can enter your PIN either from the Ppad, or from your normal keyboard.
>
> It seems (!) That with the ct710 you are forced to use the pinpad (protection against sloppy users/keyloggers)
It doesn't seem so but actually is so. The only way to send PIN
commands is through the pinpad. This effectively blocks most malware
from accessing keys which require user consent through PIN entry. It
is still possible to trick an unaware user into revealing a PIN by
prompting for it, but it will still be virtually impossible to
activate such key with the stolen PIN.
--
Martin
+372 515 6495
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
_______________________________________________
Opensc-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensc-devel
______________________________________________________________________
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het electronisch verzenden van berichten.
This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.