A team from the University of Florida won a 2018 Usenix Security Distinguished Paper Award for Fear the Reaper: Characterization and Fast Detection of Card Skimmers, which presents their work on the "Skim Reaper," a fast, easy-to-use, reliable credit-card skimmer-detector.
The team analyzed the NYPD's trove of skimmers and realized that skimmers overwhelmingly work by shimming a second read-head into the swipe slot (the alternative, a "deep tap," requires extensive work on the target machine and has only been found on gas pumps). By designing a credit-card-sized probe, they can detect these second read-heads.
It's a breakthrough: the skimmers themselves are virtually invisible and undetectable to physical inspection, but hiding the second read-head is going to be very hard.
Skimmers represent a significant and growing threat to
payment terminals around the world. Moreover, adversaries have become increasingly sophisticated, making
the detection of such attacks difficult. We address these
problems by conducting the first large-scale academic
analysis of skimming devices. With a characterization
of the techniques
being used by attackers, we
first debunk much of the common advice offered to pro-
tect consumers. We then develop the Skim Reaper tool,
which relies on the necessary physical properties of the
most common types of skimming devices found in New
York City. After successfully testing our solution on
skimmers used in real crimes, we show that simple adversarial countermeasures are ineffective against our device. Accordingly, though systematization, characterization and measurement, we show that robust and portable
tools can be developed to help consumers and law enforcement to rapidly detect such attacks.
Fear the Reaper: Characterization and Fast Detection of Card Skimmers [Nolen Scaife, Christian Peeters, and Patrick Traynor/Usenix Security]
(via Four Short Links)
In 1975, Noam Chomsky and Jean Paiget held a historic debate about the nature of human cognition; Chomsky held that babies are born with a bunch of in-built rules and instincts that help them build up the knowledge that they need to navigate the world; Piaget argued that babies are effectively blank slates that acquire […]
Tim Wu (previously) is a legal scholar best known for coining the term "Net Neutrality" -- his next book, The Curse of Bigness: Antitrust in the New Gilded Age (previously) challenges the accepted wisdom about today's digital monopolists, which is that they grew so big because of some underlying truth about online business ("first-mover advantage," […]
When you train a machine learning system, you give it a bunch of data -- a simulation, a dataset, etc -- and it uses statistical methods to find a way to solve some task: land a virtual airplane, recognize a face, match a block of text with a known author, etc.
In case you hadn’t noticed from the sleigh bell-heavy music and the hues on your Starbucks cup, the holiday season hasn’t shown any more patience this year. But that doesn’t need to be a bad thing, especially if you’re hoping to get a jump on your shopping. Retailers aren’t waiting til Black Friday to dish […]
What do you get for the techie who has everything? How about giving them a Raspberry Pi and letting them make pretty much anything. Or better yet, do it for yourself with the Ultimate Raspberry Pi eBook Bundle. This trove of ideas and education unlocks the unlimited potential of this mini-computer, whose affordability and versatility […]
Note-taking just caught up to the digital age. For most of us, writing freehand is quicker and more convenient than pecking away on a tablet, but what to do when you need those scribbles on file? Grab a Rocketbook Everlast Reusable Notebook, which seamlessly fuses analog and digital notes. Just jot down your thoughts, journals […]