Slashdot Mirror
How To Steal ATM PINs With a Thermal Camera
An anonymous reader writes "Researchers from UCSD have demonstrated how thermal imagery cameras can be used to
steal customers' PINs (PDF) when you withdraw cash from ATMs. Their paper, entitled 'Heat of the Moment: Characterizing the Efficacy of Thermal Camera-Based Attacks', (PDF) discovered that plastic PIN pads were the best for retaining heat signatures showing which numbers (and in which order) were used by bank customers. Fortunately the methodology does not appear to have been used by criminals yet, but a third of people surveyed admit that they do not check ATMs for tampering before withdrawing cash."
Hmm, I knew there was a reason that I rested all of my fingers uniformly across the keypad, gently caressing their every ridge and facet as I discreetly pumped out my digits into their PIN pad. Well, another reason, at least.
Also I try to think about a completely different song than the one that corresponds to the letters that correspond to the numbers of my PIN, just to thwart any brainwave phreaking attacks as well.
But still hoping we score some decent security measures out of this, like maybe a bank-issued gold card or something.
but a third of people surveyed admit that they do not check ATMs for tampering before withdrawing cash.
A person checking an ATM for tampering may look like they are tampering with an ATM. Now get back in line.
I use the corner of my wallet to to press the keys, let's see them work with that.
when I viewed this story. Conflict of interest here?
The bikini - security through obscurity since 1943
They did this in Splinter Cell YEARS ago.
+1 IDisagreeSoHeMustBeATrollOrAnAstroturferOrAShill
The Real Hustle on BBC3 to open a safe in a jewellery shop. How they got into the jewellery shop was pretty genius too.
And don't ever use Gamma Rays, you don't want the Hulk chasing you after you've pilfered his bank account.
Just make sure you add a bunch of heat on all the number keys before you leave to mess up their analysis. I recommend urinating on the keypad to get a good even distribution.
Even as a usually law-abiding citizen, I might be tempted to steal that camera thingy if i find it. The fact that it was put there by criminals would greatly reduce my pangs of conscience ;-)
C - the footgun of programming languages
this is an even better reason we need secure NFC transactions (with your mobile) asap. it's absurd to be typing a by-definition-weak password into an unauditable terminal. why hasn't some bank hasn't noticed that at least early adopters would pay for the privilege of paying securely?
then again, if banks simply secured their terminals, much of the hacked-ATM problem would disappear. yes, toilet-like stalls for each ATM...
Isn't it cheaper to simply mug the ATM user after they are done and take cash while out of sight of the ATM machine's own camera? You'd have to do that anyway to get the card from them. Why get all technical?
Fortunately the methodology does not appear to have been used by criminals ye
But they'll be sure to get on it right away now that they have been clued in.
When Fascism comes to America, it will call itself Anti-Fascism, and tell you to give up your guns.
Yes, these keypads have been in use for at least 10 years. You press a button to activate the keypad, and it randomly places the digits onto the pad so they're in a different place each time. After you successfully enter your code all of the numbers disappear. It certainly makes it slower to enter your PIN, but it also makes it impossible to surreptitiously determine your PIN.
Where do you live, Mogadishu?
Check out my world simulator thingy.
Because drug dealers don't take plastic.