So I'm pretty ignorant to the history of personal identity/credit breaches, but for those who aren't, is this only getting to get worse? More and more companies are holding more and more data, to the point that these breaches seem to affect so many people. I entered the credit card game pretty recently, and almost immediately I'm affected by the Equifax breach. As a young person, this doesn't make the future of privacy/security seem so promising.
Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
11–20 of 102 posts
Re: Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
#12Re: Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
#13Earlier quoted context omitted.
If someone else uses my cc, I’m not paying it. If someone steals my bitcoins, they’re fucking GONE.
Pretty much this. Bitcoins are like carrying around cash. Most folks will not argue that you own it, since it's in your pocket, but if someone picks your pocket in a crown then there's no way you're getting it back.
No they aren't.
When did cash get 2 factor auth?
Re: Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
#14Earlier quoted context omitted.
If someone else uses my cc, I’m not paying it. If someone steals my bitcoins, they’re fucking GONE.
Wrong. In the US you may be liable for the full amount stolen if you fail to notice the theft in 30 days. Even if you report the theft promptly, the law allows your issuer to make you liable for the first $50. Also you completely ignored my point about hardware wallets making theft a non-problem.
Sure, so don’t ignore your finances for a month.
Re: Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
#15Edit: it is sad that my comment that is relevant and contains nothing but facts is downvoted... What has HN become? Say what you want about Bitcoin, but it does solve credit card theft for good. If I could use my Bitcoin hardware wallet¹ to pay Sonic, I wouldn't be affected by this security breach. ¹ No Bitcoin theft has ever occurred on a hardware wallet thanks to their tamper proof isolation of private keys.
So does using a chip reader. Assuming its up to current standards the card's information is cryptographically locked to Sonic's vendor ID and any stolen stored CC info could only be used at other Sonics.
Chip + Pin solves it even better by forcing the attacker to learn the pin for the card. We're not there yet in the US but once everyone has modern chip readers, adding pins will be trivial.
Also as a customer I'm not liable for these issues. The vendor is. With cryptocurrency, if there's a hack against me and my coins are gone, well, they're gone forever.
Sure beats giving up on cc's entirely for cryptocurrency, which comes with its own headaches and problems, especially Bitcoin which as a network wouldnt be able to cover 1 hour of credit transactions in the states.
Re: Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
#16Edit: it is sad that my comment that is relevant and contains nothing but facts is downvoted... What has HN become? Say what you want about Bitcoin, but it does solve credit card theft for good. If I could use my Bitcoin hardware wallet¹ to pay Sonic, I wouldn't be affected by this security breach. ¹ No Bitcoin theft has ever occurred on a hardware wallet thanks to their tamper proof isolation of private keys.
Bitcoin is more analogous to gold bricks or cash, not credit cards.
Credit cards are built on underlying currencies, offering easy short-term debt and a simpler payment process (compared to check/cash)... I expect that bitcoin credit cards are another prerequisite for consumer adoption.
Re: Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
#17Earlier quoted context omitted.
Pretty much this. Bitcoins are like carrying around cash. Most folks will not argue that you own it, since it's in your pocket, but if someone picks your pocket in a crown then there's no way you're getting it back.
No they aren't. When did cash get 2 factor auth?
2FA is not inherently part of bitcoin's design. It's something that can be enabled, but not all implement it.
Re: Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
#18Maybe I'm a little ignorant on how/why companies store this sort of info. Someone at work informed me that Target storing CC numbers at least made sense when you needed to make a return. But at a Sonic Drive-In? I'm not returning my burger+shake combo. What is possessing Sonic to keep the number any longer than the period it takes to receive money from the CC company? And why is this period any longer than the 20 or…
> What is possessing Sonic to keep the number
They don't. From the article:
"Malicious hackers typically steal credit card data from organizations that accept cards by hacking into point-of-sale systems remotely and seeding those systems with malicious software that can copy account data stored on a card’s magnetic stripe. Thieves can use that data to clone the cards and then use the counterfeits to buy high-priced merchandise from electronics stores and big box retailers."
"The last known major card breach involving a large nationwide fast-food chain impacted more than a thousand Wendy’s locations and persisted for almost nine months after it was first disclosed here. The Wendy’s breach was extremely costly for card-issuing banks and credit unions, which were forced to continuously re-issue customer cards that kept getting re-compromised every time their customers went back to eat at another Wendy’s."
That provides an interesting lesson for vendors doing CC transactions: card compromise does not impact repeat business, so don't worry about breaches.
Re: Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
#19Re: Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards
#20Earlier quoted context omitted.
If someone else uses my cc, I’m not paying it. If someone steals my bitcoins, they’re fucking GONE.
Wrong. In the US you may be liable for the full amount stolen if you fail to notice the theft in 30 days. Even if you report the theft promptly, the law allows your issuer to make you liable for the first $50. Also you completely ignored my point about hardware wallets making theft a non-problem.
Can't you steal a hardware wallet ?