nanog mailing list archives

Re: OT: Banc of America Article


From: Sharif Torpis <faust () grift com>
Date: Wed, 29 Jan 2003 14:35:49 -0800



Halleluljah. A voice of knowledge as opposed to conjecture. Different
bank ATMs operate differently. There are online and offline modes.
The PIN may or may not be recorded on the card. Some of these
differences are due to the fact that not all financial institutions
were connected to interbank networks over two decades ago. And yes,
some banks' ATMs dispense limited amounts of cash while disconnected
from the network. This is a compromise between customer service and
fraud exposure. You won't be able to get rich that way. There are
plenty of resources on and offline related to magnetic stripe
cryptographic security and PIN verification methods such as Atalla
Identikey, Visa PW, IBM 3624, etc.

Those making the most noise should take a look at their own network
security, data security, and redundancy practices as they rail
against large financial networks and systems.

Regards,
Sharif

---
"Whenever I'm caught between two evils, I take the one I've never
tried." - Mae West

On Wed, 29 Jan 2003 13:15:54 -0600, Brett Frankenberger wrote:

On Wed, Jan 29, 2003 at 10:35:37AM -0800, Al Rowland wrote:

The PIN is on your card, likely encrypted,

We're off-topic now, so I won't go into detail, but the PIN is
sometimes on the card and sometimes not.  There are different ways
of
doing it.  (If the sampling of cards in my wallet is representative,
then mostly, the PINs aren't on the card anymore (I still have one
card
that has the PIN on the card).)

-- Brett



Current thread: