<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: New card security problem?</title>
	<atom:link href="http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/</link>
	<description>Security Research, Computer Laboratory, University of Cambridge</description>
	<pubDate>Sun, 06 Jul 2008 12:16:39 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>By: Mike Bond</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-893</link>
		<dc:creator>Mike Bond</dc:creator>
		<pubDate>Tue, 01 Aug 2006 14:40:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-893</guid>
		<description>Maybe a good solution exists at the protocol level? Card issuers can send out scripting messages to alter various card functionality, and block and unblock applications.

Simply continue to use your card after it has allegedly expired, and with a bit of luck a card block message will get sent to it. Problem solved.

My modus operandi is to hoard my old cards. Stick em in a small safe if you can be bothered, or just amalgomate them in as another risk insured against if and when your house is burgled. At least that way in the absence of burglary, you can be assured no dumpster-diving, trash-sifting, ploughed-field-metal-detecting, electron-microscope-scanning fraudster is going at your old cards without you at least knowing about it.

My 2p ;-)</description>
		<content:encoded><![CDATA[<p>Maybe a good solution exists at the protocol level? Card issuers can send out scripting messages to alter various card functionality, and block and unblock applications.</p>
<p>Simply continue to use your card after it has allegedly expired, and with a bit of luck a card block message will get sent to it. Problem solved.</p>
<p>My modus operandi is to hoard my old cards. Stick em in a small safe if you can be bothered, or just amalgomate them in as another risk insured against if and when your house is burgled. At least that way in the absence of burglary, you can be assured no dumpster-diving, trash-sifting, ploughed-field-metal-detecting, electron-microscope-scanning fraudster is going at your old cards without you at least knowing about it.</p>
<p>My 2p <img src='http://www.lightbluetouchpaper.org/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Pippin</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-819</link>
		<dc:creator>Pippin</dc:creator>
		<pubDate>Tue, 25 Jul 2006 17:08:45 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-819</guid>
		<description>In that situation, I would probably chop the card in half (or quarters) the tranditional way using scissors, put the pieces back in the envelope, selotape it shut, write "RETURN TO SENDER" in large letters on the outside and put it back in the post.</description>
		<content:encoded><![CDATA[<p>In that situation, I would probably chop the card in half (or quarters) the tranditional way using scissors, put the pieces back in the envelope, selotape it shut, write &#8220;RETURN TO SENDER&#8221; in large letters on the outside and put it back in the post.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mark George</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-818</link>
		<dc:creator>Mark George</dc:creator>
		<pubDate>Tue, 25 Jul 2006 12:09:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-818</guid>
		<description>I'm amazed that the problem of disabling a card's smartness is causing so much agitation.

I do it with my bare hands.  It takes about three seconds and no special tools.  I should point out that a reasonable length thumb-nail is an advantage.  Simply press at the centre of the contact area (invariably coincident with the centre of the chip IME) with a thumb-nail and flex the card over the nail with the two forefingers.  A small crack will normally be felt and heard as the chip fractures.  If your credit limit is so high that you live in mortal fear of a nerd with an electron microscope, a vast array of skills and incredible luck; the process may be repeated for the two remaining parts by rotating the card through 90° and listening to two further cracks.

It may be that the biometrics, on any future identity card that I may be coerced into carying, will never be readable.</description>
		<content:encoded><![CDATA[<p>I&#8217;m amazed that the problem of disabling a card&#8217;s smartness is causing so much agitation.</p>
<p>I do it with my bare hands.  It takes about three seconds and no special tools.  I should point out that a reasonable length thumb-nail is an advantage.  Simply press at the centre of the contact area (invariably coincident with the centre of the chip IME) with a thumb-nail and flex the card over the nail with the two forefingers.  A small crack will normally be felt and heard as the chip fractures.  If your credit limit is so high that you live in mortal fear of a nerd with an electron microscope, a vast array of skills and incredible luck; the process may be repeated for the two remaining parts by rotating the card through 90° and listening to two further cracks.</p>
<p>It may be that the biometrics, on any future identity card that I may be coerced into carying, will never be readable.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: LumpyTrumpet</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-814</link>
		<dc:creator>LumpyTrumpet</dc:creator>
		<pubDate>Mon, 24 Jul 2006 21:17:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-814</guid>
		<description>I've always disposed of old/unwanted cards by cutting them up and disposing of the pieces in separate bins, emptied at different times.

Let geography do the work....?</description>
		<content:encoded><![CDATA[<p>I&#8217;ve always disposed of old/unwanted cards by cutting them up and disposing of the pieces in separate bins, emptied at different times.</p>
<p>Let geography do the work&#8230;.?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Markus Kuhn</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-803</link>
		<dc:creator>Markus Kuhn</dc:creator>
		<pubDate>Sun, 23 Jul 2006 18:49:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-803</guid>
		<description>When Barclays Bank sent me my last banking card, their cover letter advised me to cut up the old card and to make sure that I also cut with scissors right through the centre of the chip. I suspect that most customers will read "centre of the chip" as "centre of the contact area", but that difference may not matter since for all smartcard chips that I ever depackaged, the two locations were the same.

Cutting through the contact area is very likely to damage connectivity for at least some of the pads by either damaging the bonding wire or the little PCB tracks on the back of the contact pads. Such damage could be fixed with a reasonable success rate with modest means (conductive ink, probing needles, fine soldering iron, etc.). If you actually manage to break the chip into two or more parts, the effort necessary to access its EEPROM content would certainly be very formidable and impressive, and probably cost substantially more than the fraud one could commit with it. Most importantly, the substantial work needed to access memory on a fractured die is not easily repeated. Honest work at that skill level simply pays more.

I tried and did indeed manage quite easily to cleave my die into at least three fragments with normal office scissors, but then, I may be a bit more familiar with the anatomy of a smartcard than the average Barclays customer. So this single experiment is no meaningful indicator for the success rate of the method recommended by Barclays. No doubt, a proper paper is yet to be written about an experiment in which 200 random bank customers are given a chip card, some old scissors, and asked to follow simple instructions in a cover letter for cutting up the card.

On a related note: I was once told that in the early 1990s, German Telecom noticed that in some areas there had suddenly been surges in complaints about defect pre-paid phone cards for which customers wanted to have a refund. German Telecom started to routinely depackage returned cards and discovered that some customers had fully used the cards, then melted the bonding-wire contacts by ironing the card, and finally claimed at the post office that the defect card had never worked and asked for a full refund.</description>
		<content:encoded><![CDATA[<p>When Barclays Bank sent me my last banking card, their cover letter advised me to cut up the old card and to make sure that I also cut with scissors right through the centre of the chip. I suspect that most customers will read &#8220;centre of the chip&#8221; as &#8220;centre of the contact area&#8221;, but that difference may not matter since for all smartcard chips that I ever depackaged, the two locations were the same.</p>
<p>Cutting through the contact area is very likely to damage connectivity for at least some of the pads by either damaging the bonding wire or the little PCB tracks on the back of the contact pads. Such damage could be fixed with a reasonable success rate with modest means (conductive ink, probing needles, fine soldering iron, etc.). If you actually manage to break the chip into two or more parts, the effort necessary to access its EEPROM content would certainly be very formidable and impressive, and probably cost substantially more than the fraud one could commit with it. Most importantly, the substantial work needed to access memory on a fractured die is not easily repeated. Honest work at that skill level simply pays more.</p>
<p>I tried and did indeed manage quite easily to cleave my die into at least three fragments with normal office scissors, but then, I may be a bit more familiar with the anatomy of a smartcard than the average Barclays customer. So this single experiment is no meaningful indicator for the success rate of the method recommended by Barclays. No doubt, a proper paper is yet to be written about an experiment in which 200 random bank customers are given a chip card, some old scissors, and asked to follow simple instructions in a cover letter for cutting up the card.</p>
<p>On a related note: I was once told that in the early 1990s, German Telecom noticed that in some areas there had suddenly been surges in complaints about defect pre-paid phone cards for which customers wanted to have a refund. German Telecom started to routinely depackage returned cards and discovered that some customers had fully used the cards, then melted the bonding-wire contacts by ironing the card, and finally claimed at the post office that the defect card had never worked and asked for a full refund.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Clive Robinson</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-796</link>
		<dc:creator>Clive Robinson</dc:creator>
		<pubDate>Sat, 22 Jul 2006 13:14:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-796</guid>
		<description>Actually the problem of destroying chips is very very difficult, I used to think the microwave method was good enough but it is not. Even though it destroys the chips ability to work, it is still possible to view the chip remains in a scanning electron microscope (which are available at quite low cost) and some parts will survive and I have been told that in theory it is possible to work out the data in those areas....

The only method I know that is actually certiffied as working involves the use of a mixture of either Red Lead (lead oxide) and Aluminium dust  or aluminium oxide and iron dust (thermite, also Aluminium and Iron oxide). Thermite can burn at around  +2500C and higher, however you need an oxy cutting torch to get it going, unless you and a few other chemicals to start it burning easily. In practice you add others to make it stable and  and help raise the temprature even more.

A little experimentation shows that if you use aluminium powder and red lead you can start it burning easily if you use ferric chloride crystals mixed with the aluminium dust, you simply need to get the mixture wet you can set it off as I have found out by spitting or urinating on it. HEALTH WARNING wear gloves as your sweat will be enough to make the exothermic reaction start and it will give you a very very nasty burn.

Red lead and aluminium powder can be bought from places like auto shops, and ferric chloride is available from your local friendly Maplin or Tandy as it is used as copper clad PCB etchant. If you want to buy in bulk BDH (British Drugs House) used to sell all of them in very high purity at quite low cost in 500g upwards quantities.</description>
		<content:encoded><![CDATA[<p>Actually the problem of destroying chips is very very difficult, I used to think the microwave method was good enough but it is not. Even though it destroys the chips ability to work, it is still possible to view the chip remains in a scanning electron microscope (which are available at quite low cost) and some parts will survive and I have been told that in theory it is possible to work out the data in those areas&#8230;.</p>
<p>The only method I know that is actually certiffied as working involves the use of a mixture of either Red Lead (lead oxide) and Aluminium dust  or aluminium oxide and iron dust (thermite, also Aluminium and Iron oxide). Thermite can burn at around  +2500C and higher, however you need an oxy cutting torch to get it going, unless you and a few other chemicals to start it burning easily. In practice you add others to make it stable and  and help raise the temprature even more.</p>
<p>A little experimentation shows that if you use aluminium powder and red lead you can start it burning easily if you use ferric chloride crystals mixed with the aluminium dust, you simply need to get the mixture wet you can set it off as I have found out by spitting or urinating on it. HEALTH WARNING wear gloves as your sweat will be enough to make the exothermic reaction start and it will give you a very very nasty burn.</p>
<p>Red lead and aluminium powder can be bought from places like auto shops, and ferric chloride is available from your local friendly Maplin or Tandy as it is used as copper clad PCB etchant. If you want to buy in bulk BDH (British Drugs House) used to sell all of them in very high purity at quite low cost in 500g upwards quantities.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tim Kerby</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-784</link>
		<dc:creator>Tim Kerby</dc:creator>
		<pubDate>Fri, 21 Jul 2006 12:44:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-784</guid>
		<description>My methods, should work individually or in combination

1 - Microwave for 30 seconds with a glass of water in the microwave at full power.  The water stops you destroying the microwave and the extra time means you dont have the card at any of the null points in the standing waves that form in microwaves

2 - Hammer - cut out the chip and bash to a powder

3 - Fire - Put it on a good hot log fire, or even on an old baking tray on your barbeque.  Toast slowly until done!

4 - Seperate disposal.  Remove the chip and dispose of it separately from the rest of the card.  It's small size should make it hard to find.  I've heard of throwing them in the water at beaches, down drains and burrying them but a normal on street dustbin should do just fine

5 - Eat it spy style.  Your stomach acid should easily destroy the chip. [joking]</description>
		<content:encoded><![CDATA[<p>My methods, should work individually or in combination</p>
<p>1 - Microwave for 30 seconds with a glass of water in the microwave at full power.  The water stops you destroying the microwave and the extra time means you dont have the card at any of the null points in the standing waves that form in microwaves</p>
<p>2 - Hammer - cut out the chip and bash to a powder</p>
<p>3 - Fire - Put it on a good hot log fire, or even on an old baking tray on your barbeque.  Toast slowly until done!</p>
<p>4 - Seperate disposal.  Remove the chip and dispose of it separately from the rest of the card.  It&#8217;s small size should make it hard to find.  I&#8217;ve heard of throwing them in the water at beaches, down drains and burrying them but a normal on street dustbin should do just fine</p>
<p>5 - Eat it spy style.  Your stomach acid should easily destroy the chip. [joking]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kal</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-783</link>
		<dc:creator>Kal</dc:creator>
		<pubDate>Fri, 21 Jul 2006 11:19:52 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-783</guid>
		<description>Can someone edit the above Name field, ctrl+v mistakes!!!

(Done - Ross)</description>
		<content:encoded><![CDATA[<p>Can someone edit the above Name field, ctrl+v mistakes!!!</p>
<p>(Done - Ross)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: kalsius@gmail.com</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-782</link>
		<dc:creator>kalsius@gmail.com</dc:creator>
		<pubDate>Fri, 21 Jul 2006 11:17:56 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-782</guid>
		<description>Surely disposal isn't the only problem... If I don't know I am supposed to be receiving a credit card with a pre approved limt which presumably is ready to use then I can't alert anyone if I don't receive it in a reasonable amount of time...

If I want something I should initiate the transaction and then be able to provide assurance from my end that the transaction completes. In this case someone who possibly managed to get hold of this mail (I know plenty of people who throw this type of mail away without evening opening it) then there is no secondary measure which allows me to say "Hey I should have received my card and I haven't, maybe I should chase this up"

If UK banks aren't supposed to do this, its for a really good reason.</description>
		<content:encoded><![CDATA[<p>Surely disposal isn&#8217;t the only problem&#8230; If I don&#8217;t know I am supposed to be receiving a credit card with a pre approved limt which presumably is ready to use then I can&#8217;t alert anyone if I don&#8217;t receive it in a reasonable amount of time&#8230;</p>
<p>If I want something I should initiate the transaction and then be able to provide assurance from my end that the transaction completes. In this case someone who possibly managed to get hold of this mail (I know plenty of people who throw this type of mail away without evening opening it) then there is no secondary measure which allows me to say &#8220;Hey I should have received my card and I haven&#8217;t, maybe I should chase this up&#8221;</p>
<p>If UK banks aren&#8217;t supposed to do this, its for a really good reason.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: NIk</title>
		<link>http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-780</link>
		<dc:creator>NIk</dc:creator>
		<pubDate>Fri, 21 Jul 2006 09:22:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.lightbluetouchpaper.org/2006/07/20/new-card-security-problem/#comment-780</guid>
		<description>The problem with most off-the-shelf cheap shredders is that the fragment size is at least 4-5mm wide, which means the chip itself may well survive intact. Sure, it's a lot more difficult to exploit, but there is still a risk.

Perhaps there might be a route to force the banks to handle it under the new raft of enviromental disposal regulation (WEEE etc)?</description>
		<content:encoded><![CDATA[<p>The problem with most off-the-shelf cheap shredders is that the fragment size is at least 4-5mm wide, which means the chip itself may well survive intact. Sure, it&#8217;s a lot more difficult to exploit, but there is still a risk.</p>
<p>Perhaps there might be a route to force the banks to handle it under the new raft of enviromental disposal regulation (WEEE etc)?</p>
]]></content:encoded>
	</item>
</channel>
</rss>
