Computerworld: Researchers at the University of Cambridge in the U.K. have demonstrated how a chip-and-PIN terminal used to authenticate credit and debit card transactions in that country can be compromised to steal sensitive data. For the proof-of-concept hack, the researchers opened up one of the supposedly tamper-proof terminals, replaced its internal hardware with their own, put it back together without any external evidence of tampering and then got the machine to play Tetris.
"We demonstrated that with the new hardware, everything is under our control — the card reader, the LCD display and the keypad," said Saar Drimer, one of the researchers involved in the demonstration.
