Chip and pin 'weakness' exposed by Cambridge researchers