A whole new HSM...

swanberg

From this article: PIN Crackers Nab Holy Grail of Bank Card Security

Quote:

Sartin says the latter attacks involve a device called a hardware security module (HSM), a security appliance that sits on bank networks and on switches through which PIN numbers pass on their way from an ATM or retail cash register to the card issuer. The module is a tamper-resistant device that provides a secure environment for certain functions, such as encryption and decryption, to occur. (emphasis mine)

Except they're not secure:

Quote:

"Essentially, the thief tricks the HSM into providing the encryption key [for the PIN]," says Sartin.

Holy Shit Module?

BatonRouge Bill

You weren't a victim were you? :shock:

swanberg

Nope.

mweidner

That sounds like a badly setup HSM, we use these where I work and like anything if you give an idiot control to run the thing it won't be very secure. However if you follow the best practices it will be more secure that most stuff you will run across.

However it seems there are more and more idiots in the marketplace these days, I guess if you have enough certifications you must be good right??? :shock:

Backyard Aquaponics A place to discuss aquaponics

A whole new HSM...

Backyard Aquaponics
A place to discuss aquaponics