Consider you lost your laptop with sensitive data and your smart card that contains the private key for your GnuPG and Truecrypt accounts. The smartcard is secured with a 8-digit PIN.
1) Is it possible for an attacker who finds the smartcard to somehow extract the privat-key; resulting in decrypting all sensitive data from GnuPG and Truecrypt?
(a) Consider laboratory circumstances. Further, is it possible to use acid or hightech-laser to melt off the chip shielding and literally 'extract' the private-key with some wires you put there?
(b) Could the attacker basically exploit the PIN verification process with a side channel attack? Imagine the attacker inputs a random PIN and analyzes the side-channel-informations of the smartcard which checks if the PIN is correct. Is that possible?
2) Does it matter what kind of smartcard you use?