[18306] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

instant lottery cards too, Re: reading PINs in "secure" mailers without

daemon@ATHENA.MIT.EDU (Ed Gerck)
Sat Aug 27 09:46:33 2005

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Fri, 26 Aug 2005 15:44:57 -0700
From: Ed Gerck <edgerck@nma.com>
To: cryptography@metzdowd.com
In-Reply-To: <871x4ge6pr.fsf@snark.piermont.com>

Years ago, I could read "instant win" lottery cards and still leave them
as new by using the laser photoacoustic effect. A low-power chopped laser
beam is focused and line-scans the target while a microphone picks up
the acoustic waves caused by differential absorption of the laser light
as it sweeps the line. By phase-shifting the received acoustic signal
versus the chopped light signal (they have the same frequency), you
can read at different depths of the target. Adjusting to hearing at
the depth of the paper substrate, below the covering ink, all markings
could be read as if the covering ink did not exist, line by line.

The apparatus could be built today by something like $500, I believe,
using parts readily available. Distributors of the "instant lottery"
cards could, without detection, separate the winning cards.

Unlike ATM cards, there are no cards that must be stolen at the same
time for the attack to be successful.

Cheers,
Ed Gerck

Perry E. Metzger wrote:
> Often, banks send people PINs for their accounts by printing them on
> tamper "secure" mailers. Some folks at Cambridge have discovered that
> it is easy to read the PINs without opening the seals...
> 
> http://news.bbc.co.uk/1/hi/technology/4183330.stm
> 

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post