X-Ray Scans Expose Chip-And-Pin Card Hack
FTA: <i>A fraudulent chip can listen for that query and pre-empt the real chip with its own answer: a “yes” signal regardless of whatever random PIN the fraudster has entered. “The attacker intercepts the PIN query and replies that it’s correct, whatever the code is,”</i><p>Wait, what?  How is that the protocol?  There's no two way validation at all?  The chip just says "yes"?!<p>Can anyone with knowledge of details confirm?  This seems isomorphic to my ears with "the PIN is just security theater".