"A corrupt banking employee can guess your PIN number in just 15 attempts because of a weakness in banks' computer systems..." Update: Here's the original paper in .pdf format.