UK researchers have hacked a supposedly tamper-proof Chip and PIN terminal to allow it to play Tetris. Steven Murdoch and Saar Drimer of the University of Cambridge managed to get a playable version of the classic game working on the tiny screen.

The proof-of-concept hack highlights wider security concerns about the terminals even though it was only possible after Murdoch and Drimer replaced most of the internal electronics after opening up the terminal. The attack illustrates the possibility that hackers might be able to physically modify terminals for far more malign purposes.

Entertainingly Murdoch and Drimer have made a short video of the attack, which they released via YouTube. ®

Related stories

• Chip and SKIM: How dodgy crypto can leave shoppers open to fraud (19 May 2014)

  https://www.theregister.com/2014/05/19/chip_and_skim/

• Cambridge security boffins slam banking card readers (26 February 2009)

  https://www.theregister.com/2009/02/26/bank_reader_insecurity/

• UK fraudster gang go PIN sniffing (21 August 2008)

  https://www.theregister.com/2008/08/21/pin_tampering_analysis/

• Cybercrime bust highlights PIN terminal insecurity (13 August 2008)

  https://www.theregister.com/2008/08/13/pin_security_analysis/

• Paper clip attack skewers Chip and PIN (27 February 2008)

  https://www.theregister.com/2008/02/27/credit_card_reader_security_pants/

• Barclays deploys PINsentry to fight fraud (18 April 2007)

  https://www.theregister.com/2007/04/18/pinsentry/

• Chip and PIN card security compromised (again) (6 February 2007)

  https://www.theregister.com/2007/02/06/card_security_attack/

• Barclaycard adds Oyster to credit cards (14 December 2006)

  https://www.theregister.com/2006/12/14/barclaycard_oyster_card/

• UK credit card fraud down to £209.3m (7 November 2006)

  https://www.theregister.com/2006/11/07/credit_card_fraud_stats/

• Tesco self-scan tills 'open to card fraud' (5 October 2006)

  https://www.theregister.com/2006/10/05/tesco_security_loophole/

• Red alert over London on credit card fraud map (7 September 2006)

  https://www.theregister.com/2006/09/07/credit_card_fraud_map/

• Chip and PIN fraud hits Lloyds TSB (11 May 2006)

  https://www.theregister.com/2006/05/11/lloyds_tsb_chip_and_pin_fraud/

• Shell suspends Chip and PIN after £1m fraud (8 May 2006)

  https://www.theregister.com/2006/05/08/shell_suspends_chippin/

• Fraud falling under Chip and PIN (14 March 2006)

  https://www.theregister.com/2006/03/14/chip_and_pin_security/

• Safeway hacked in email raid (14 August 2000)

  https://www.theregister.com/2000/08/14/safeway_hacked_in_email_raid/