BSides London 2025

The topic covers security aspects of EMV bank cards: how to read the static data stored on a card, how those data can be copied to another smartcard using a standard reader and publicly available tools or a custom Python script, how man-in-the-middle techniques can be executed, and the PIN OK attack. A bank card is an everyday object that protects financial assets and is defended by multiple overlapping security mechanisms; banks deliberately layer these protections because no single control is sufficient.