Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Criminals can guess Visa number and security code in six seconds, experts find

independent.co.uk

Post reply on HN
Print view View original

161–166 of 166 posts

Re: Criminals can guess Visa number and security code in six seconds, experts find

#161

Post by ryanlol »

Cyph0n wrote: post #23
ryanlol wrote: post #10

Earlier quoted context omitted.

The data you'd gain from this is practically useless to anyone looking to commit fraud... so laugh at the article I guess? Maybe you could abuse this to create a lot of netflix accounts, but you aren't really going to be able to buy anything with just the PAN/cvv/expiry.

Game gifts on online stores, such as Steam, are a common target.

Yes, and you won't be able to use this data on such sites.

You'd be stopped by the very first line of defence, AVS checks.

Re: Criminals can guess Visa number and security code in six seconds, experts find

#162

Post by ryanlol »

TheDong wrote: post #110
ryanlol wrote: post #10

Earlier quoted context omitted.

The data you'd gain from this is practically useless to anyone looking to commit fraud... so laugh at the article I guess? Maybe you could abuse this to create a lot of netflix accounts, but you aren't really going to be able to buy anything with just the PAN/cvv/expiry.

https://purse.io/ is a website for committing fraud with stolen credit cards. It's a website that specializes in letting criminals convert credit card details (PAN/cvv/expiry) into bitcoin while exposing them to minimal risk. There are very real ways to commit such fraud.

Yeah, it's really not that easy.

I'm sure it may seem so for someone who's really never dealt with fraud, but it's definitely not as easy as just signing up to amazon and making an order.

If you tried to use UK cards gained from doing this, I assure you, not a single one of your orders would ever ship.

You'd just be wasting your time getting all your drop addresses (or purse customer addresses) blacklisted.

Re: Criminals can guess Visa number and security code in six seconds, experts find

#163

Post by ryanlol »

contingencies wrote: post #82
closeparen wrote: post #73

Earlier quoted context omitted.

No, there's an analogue of the CVV2, the CVV1, which is only present on the magnetic stripe. The information you'd get from an online transaction is not enough to print a working magstripe.

There are still offline processors that don't read magstripe and just take a copy of the card and a signature.

Not a repeatable form of fraud. You won't be able to make money abusing offline processing.

Why not just buy magnetic stripe dumps for a couple of $ each online? Significantly better risk/reward ratio.

Re: Criminals can guess Visa number and security code in six seconds, experts find

#164

Post by hehheh »

jpatokal wrote: post #103
Terretta wrote: post #81

Earlier quoted context omitted.

For AMEX, there's still a 3 digit CSC code on the back which you will need from time to time. The 4 digit code on the front is their CID, asked for by most merchants.

Citation needed. I have an AMEX in my wallet and it does not have any codes on the back, nor have I ever been asked for one.

Old comment, sorry, but I think AMEX codes are on the front of the card.

Re: Criminals can guess Visa number and security code in six seconds, experts find

#165

Post by erikpukinskis »

kctess5 wrote: post #123
caf wrote: post #94

Earlier quoted context omitted.

Guessing 100 numbers, there's a chance to produce 2 or more hits, of course. ..to the point that the expected value should converge to the same amount, right?

The expected value of both strategies is to have 1 success, but they have different variance. The first strategy has variance of 0.99, and the second strategy has variance 0. The chance of n out of 100 hits with the first strategy is: binomial(100,n) x 0.01^n x 0.99^(100-n) edit: asterisks as multiplication signs => italics

Right, but variance doesn't matter if you just repeat the scam tomorrow.

Re: Criminals can guess Visa number and security code in six seconds, experts find

#166

Post by jlgaddis »

jpatokal wrote: post #103
Terretta wrote: post #81

Earlier quoted context omitted.

For AMEX, there's still a 3 digit CSC code on the back which you will need from time to time. The 4 digit code on the front is their CID, asked for by most merchants.

Citation needed. I have an AMEX in my wallet and it does not have any codes on the back, nor have I ever been asked for one.

I just checked. I have three AMEX cards (Platinum, Blue Cash Preferred, Green) in my wallet. All three have both four-digit numbers on the front as well as three-digit numbers on the back.

I don't recall ever being asked for the three-digit code on the back (like I am with most VISA/MasterCard credit cards). It's always the four-digit one on the front.

Post reply on HN