Arab Today, arab today hackers turn square readers into crime tools
Last Updated : GMT 10:57:46
Arab Today, arab today
Arab Today, arab today

Hackers turn Square readers into crime tools

Arab Today, arab today

Arab Today, arab today Hackers turn Square readers into crime tools

John Moore and Alexandrea Mellen
San Francisco - AFP

Hackers on Thursday showed how to turn the latest model Square mobile payments readers into crime tools.

Independent security researchers and self-described hackers Alexandrea Mellen and John Moore were at the Black Hat computer security conference in Las Vegas to demonstrate hacks targeting Square software or the dongle that plugs into audio jacks to read credit card magnetic strips.

"We converted a Square Reader into a credit card skimmer in under 10 minutes," Mellen told AFP.

"Any layman could do it."

She said the hardware hack can be done with simple tools including a screwdriver, wire and soldering iron, and that most of the time involved was spent carefully popping open the reader that Square provides to users of its mobile payments application.

Inside the reader a wire is soldered between two points to bypass an encryption chip.

After that, unscrambled information from swiped credit cards can be collected, essentially stolen, to be sold on a black market or abused in other ways, according to Mellen.

- Playback attack -

On the software side, Moore provided details about a mobile application that enables a "playback attack" that lets merchants charge customs for bogus transactions in the weeks or months after legitimate purchases are consumated.

"We find this troubling because unless you are closely watching your credit card statements, you might not notice," said Moore, a recent Boston University graduate on his way to a job with Internet giant Google.

Moore said that he and Mellen, also a recent graduate of Boston University, targeted the Square Reader because the company headed by Twitter co-founder Jack Dorsey is a leader in a booming trend of using smartphones for real-world financial transactions.
"Square, given its size and a bug bounty program, is no easy target," Moore said.

"We suspect the vulnerabilities we found in Square might easily apply to other mobile point-of-sale service providers."

An array of major Internet firms offer cash rewards, or bounties, for software bugs that can be exploited by hackers.

New hardware and software is quickly being fielded in the competitive mobile payments market, with pressure on to keep plug-ins compact and inexpensive, according to Moore.

Mobile payments software needs to be compatible with a variety of mobile phones, which can't be secured as easily since they are used for many more purposes than making purchases.

Moore referred to the combination of factors as "a recipe for disaster."

The hackers said they made their findings available to San Francisco-based Square but are not convinced fixes are planned.

Moore said Square told him they were watching for the kinds of bogus transactions that could be generated by "playback" hacks.

"They have the information to see the swipe of the credit card was taken weeks ago," Moore said.

"They have chosen to monitor the behavior instead of preventing it."

 

Name *

E-mail *

Comment Title*

Comment *

: Characters Left

Mandatory *

Terms of use

Publishing Terms: Not to offend the author, or to persons or sanctities or attacking religions or divine self. And stay away from sectarian and racial incitement and insults.

I agree with the Terms of Use

Security Code*

Arab Today, arab today hackers turn square readers into crime tools Arab Today, arab today hackers turn square readers into crime tools

 



Arab Today, arab today
Arab Today, arab today Nasima Gamei revives Algerian heritage in jewelries

GMT 22:42 2017 Thursday ,23 February

Nasima Gamei revives Algerian heritage in jewelries
Arab Today, arab today Saudis await visitors but will they come?

GMT 11:54 2017 Thursday ,23 February

Saudis await visitors but will they come?
Arab Today, arab today Sarah Belamesh designs antiques of "ceramic"

GMT 19:45 2017 Monday ,20 February

Sarah Belamesh designs antiques of "ceramic"
Arab Today, arab today Mental conflict endures

GMT 07:36 2017 Friday ,24 February

Mental conflict endures
Arab Today, arab today Media host Mona Iraqi stresses her show's success

GMT 15:32 2017 Wednesday ,22 February

Media host Mona Iraqi stresses her show's success

GMT 06:48 2017 Saturday ,18 February

Dominican journalists shot dead during live broadcast

GMT 05:13 2017 Tuesday ,14 February

Sharjah TV begins 3rd season of Sharjah Junior Munshid

GMT 03:43 2017 Saturday ,11 February

National Media Council's New Logo Launched

GMT 15:06 2017 Friday ,10 February

383 violations against media freedoms during 2016

GMT 15:33 2017 Thursday ,09 February

Egypt backs Trump’s media criticism

GMT 01:44 2017 Wednesday ,08 February

Dubai Media City and Thomson Reuters host blood drive
View News in Arabic - Media: آخر الأخبار
Arab Today, arab today
Arab Today, arab today
Arab Today, arab today To hold social dialogue over secondary school

GMT 07:43 2017 Wednesday ,22 February

To hold social dialogue over secondary school
Arab Today, arab today UK appoints 1st Scotland Yard chief in 188 years

GMT 05:14 2017 Thursday ,23 February

UK appoints 1st Scotland Yard chief in 188 years
Arab Today, arab today Ex-yoga missionary unleashes rage

GMT 12:16 2017 Thursday ,23 February

Ex-yoga missionary unleashes rage
Arab Today, arab today Pluto's unruly moons

GMT 06:31 2015 Thursday ,04 June

Pluto's unruly moons
Arab Today, arab today Tesla back into red but revenue grows

GMT 07:27 2017 Thursday ,23 February

Tesla back into red but revenue grows
Arab Today, arab today Nissan enhances sales in most markets

GMT 14:08 2017 Monday ,20 February

Nissan enhances sales in most markets
Arab Today, arab today Wafaa Amer is happy for Sherihan’s return

GMT 07:36 2017 Wednesday ,22 February

Wafaa Amer is happy for Sherihan’s return
Arab Today, arab today Milan laughs while Rome cries

GMT 10:28 2017 Wednesday ,22 February

Milan laughs while Rome cries

GMT 05:19 2017 Tuesday ,21 February

Salma Rashid happy for 'A Whisper of Love'

GMT 12:35 2017 Tuesday ,21 February

63-Year-Old Woman Delivers Baby

GMT 20:02 2017 Tuesday ,21 February

Nohan Seyam designs beautiful accessories

GMT 15:53 2017 Tuesday ,21 February

Small ponds have outsized impact

GMT 23:29 2017 Thursday ,16 February

Home built on sand castles-style costs $8m

GMT 07:51 2017 Wednesday ,22 February

Mom's immune system accepts babies

GMT 17:46 2017 Saturday ,18 February

Tourist guide reveals methods of tourist attractions

GMT 13:12 2015 Saturday ,09 May

Sheikh Sultan opens Sharjah Centre

GMT 12:22 2017 Monday ,20 February

Kanye West puts hijab-wearing model
Arab Today, arab today
Arab Today, arab today
 
 Arab Today Facebook,arab today facebook  Arab Today Twitter,arab today twitter Arab Today Rss,arab today rss  Arab Today Youtube,arab today youtube  Arab Today Youtube,arab today youtube
arabstoday arabstoday arabstoday arabstoday
arabstoday arabstoday arabstoday
arabstoday
بناية النخيل - رأس النبع _ خلف السفارة الفرنسية _بيروت - لبنان
arabstoday, Arabstoday, Arabstoday