A university defends the publication of a security thesis
Summary
Boing Boing reports how Cambridge stood up to a bank's attempt to censor a student thesis about weaknesses in chip-and-PIN systems. Security knowledge does not disappear because an institution prevents its publication. Public criticism can help users when operators would otherwise play down known risks.
Ideas
- The research described a practically exploitable flaw in a widely used payment system.
- The bank concerned demanded that the thesis be removed from public access.
- The university defended academic scrutiny and publication instead of silent suppression.
Recommendations
- Coordinate disclosure without giving those affected an unlimited veto.
- Document technical evidence, the timeline and countermeasures that are already available.
References
Links to the original source and the Web Archive open in a new tab.