Wednesday, July 2, 2008

ATM Breach

Start off the day with something scary here. The four-digit Personal Identification Number or PIN you type into an ATM isn't as safe as you think. Hackers "broke into the ATM network through a server at a third-party processor, which means they probably didn't have to touch the ATMs at all to pull off the heist."

They didn't even touch the ATM! So much for the head-bob, the I-can't-believe-you're-watching-me stare, the body-block or the hand-guard people use when punching in those precious PINs at ATMs and grocery stores everywhere.

In previous PIN thefts, thieves generally took steps that might draw notice — sending "phishing" e-mails, for example, or installing false-front keypads or even tiny cameras on ATMs.

So we still have to watch for all those things, but now we can worry that a hacker is stealing our closely-guarded PINs while we sleep.

Of course one of the third-party processor company spokespersons is "confident in the integrity and security of our system."
Industry standards that call for protecting PINs with strong encryption — which means encoding them to cloak them to outsiders
And surprise, surprise, industry alone isn't doing its job.

Will states or Congress act? Should they? Is there something we can do in the meantime besides bite our nails?

If you have any ideas, please post them by hitting Comments below and to the right.

No comments:

Post a Comment