The Computer Says No, But The Card Says Yes: Hacking Offline Card Payments


Mika Rautio

The captain cut the cable. Your card still works. Who said yes to payment? For the last 25 years we have forced card payments online to reduce payment fraud. Now someone keeps cutting Baltic cables, and European central banks want to make offline payments great again. This talk is a tour of offline card payments and their vulnerabilities.


Mika Rautio

Mika is a security architect at Nexi Digital Finland, writing payment terminal software with his left hand and attacking it with his right. His current hyperfixation is card payments and the ways they could go wrong. Survivor of far too many PCI standards and too many versions of each.