Cardreader Software for PC

Olipro

So, Just curious if anyone would find such an app useful...

I've written a program that can perform all the functions of a standard Xiring card reader (the ones barclays, NatWest et. al. give to customers) - it's compatible with all EMV CAP enabled cards regardless of the issuer (and by EMV CAP I mean all cards that can be used in a cardreader)

Obviously in order to actually use the program you're going to need a PC/SC (smartcard) reader attached to your computer otherwise unfortunately it's going to be about as useful as a chocolate teapot

Anyhow, just curious if anyone would be interested in such a thing... I made it mainly for my own amusement and also because my existing reader's batteries are giving up the ghost (well, that's my excuse and I'm sticking to it)

if you have a smartcard reader attached to your PC then drop a reply in this thread and I'll send it to you.

And for the anal retentives: this software does not contain any ATR values whatsoever, it is incapable of identifying your bank card, it will simply attempt to communicate with any smartcard you plug into ths system, if the correct application ID is found it will continue, otherwise it will give up, all code is original, program was written with the help of the latest EMV standards manual and an academic document detailing the tags associated with the CAP protocol.

And finally, no this software does not "break" the cardreader security; the whole cryptographic process is peformed by the smartcard inside the smartcard, nonetheless I do not recommend storing values generated by any cardreader since they can be replayed at any time (especially identify commands), the only way an old command can potentially be broken is if you use your card at a shop or ATM and even then this is highly dependant on how strict your bank's software is about the transaction counter of the card. Also, if you do something stupid like enter your PIN wrongly 3 consecutive times, then it will still block itself.

Full-disclosure: Whilst I will personally assure you that there is no malware in the software and it does not require an internet connection nor does it store any details whatsoever; you should of course do your own due diligence, which, considering you must have an SC reader on your PC anyway, I would anticipate that anyone capable of using it is intelligent enough to keep themselves secure and for the really paranoid... run wireshark while it's going and see if it tries to make any connections to the outside world, I can assure you it won't.

TUS

I don't have a SC reader, but dude ... that sounds damn cool. Impressed!

Olipro

you can buy a Dell keyboard with integrated smartcard reader for under a tenner these days, if such a thing interests you.

just google "keyboard smart card reader" and you'll see