News for hackers. Stuff that matters.

A comment on Announcing The Matasano/Square CTF. Parent comment

Re:Announcing The Matasano/Square CTF by Scaevolus on Thursday January 16, 2014 @10:30PM (#7074103)
In particular, Square's credit card readers use an MSP430 chip to encrypt the stripe data before passing it on the phone.

Their first credit card readers were entirely analog devices, which were very easy to use to skim cards.

Hopefully the latest batches have per-device unique keys (based on some centrally-known KDF) so a compromise of one doesn't re-enable such an exploit.

[ Parent | on HN ]
Re:Announcing The Matasano/Square CTF by tptacek on Thursday January 16, 2014 @10:34PM (#7074118)
Just so I can be super clear here: none of the code in this challenge has anything whatsoever to do with anything Square ships. We deliberately made things less realistic to make the levels more fun, and easier to ramp up with.
[ Parent | on HN ]
Re:Announcing The Matasano/Square CTF by bigmac on Friday January 17, 2014 @12:25AM (#7074446)
Hopefully the latest batches have per-device unique keys (based on some centrally-known KDF) so a compromise of one doesn't re-enable such an exploit.

Yes, that's how it works.

[ Parent | on HN ]