Live data from Hacker News

Is your chip card secure? Much depends on where you bank

krebsonsecurity.com

11–20 of 180 posts

Re: Is your chip card secure? Much depends on where you bank

#11
post #2

What if you sidestepped all the chip cleverness and just put cameras to capture the name, CC number, expiration and 3 digits? You'd still need a billing address I guess, but you might be able to get that by looking up the name and disambiguating using the location of the terminal.

Vendors get much less protection when doing a card not present transaction. They also usually pay higher fees. There are also cases where an additional layer of security is used, visa secure

Re: Is your chip card secure? Much depends on where you bank

#12
post #2

What if you sidestepped all the chip cleverness and just put cameras to capture the name, CC number, expiration and 3 digits? You'd still need a billing address I guess, but you might be able to get that by looking up the name and disambiguating using the location of the terminal.

> What if you sidestepped all the chip cleverness and just put cameras to capture the name, CC number, expiration and 3 digits? Apple Cards have just the name on them, which is a nice step in the right direction. (No contactless, though, which is weird.)

Why would you need it, you've got an iPhone right?

(semi serious here - I'm sure they want you to use Apple Pay)

Re: Is your chip card secure? Much depends on where you bank

#13
post #5
post #2

What if you sidestepped all the chip cleverness and just put cameras to capture the name, CC number, expiration and 3 digits? You'd still need a billing address I guess, but you might be able to get that by looking up the name and disambiguating using the location of the terminal.

A lot of merchants are starting to use 3D Secure now which is essentially two-factor authentication.

Starting to?

It's been pretty standard for over ten years... (I'm in the UK, I have no idea how our market compares to yours)

Re: Is your chip card secure? Much depends on where you bank

#14
post #13
post #5

Earlier quoted context omitted.

A lot of merchants are starting to use 3D Secure now which is essentially two-factor authentication.

Starting to? It's been pretty standard for over ten years... (I'm in the UK, I have no idea how our market compares to yours)

I said "starting" to include the US which I expect to be still far behind. I agree that in the UK it's been standard and in fact EU regulations now make this mandatory anyway.

Re: Is your chip card secure? Much depends on where you bank

#15
post #13
post #5

Earlier quoted context omitted.

A lot of merchants are starting to use 3D Secure now which is essentially two-factor authentication.

Starting to? It's been pretty standard for over ten years... (I'm in the UK, I have no idea how our market compares to yours)

> It's been pretty standard for over ten years.

It's unheard of in the US.

Re: Is your chip card secure? Much depends on where you bank

#16
post #12

Earlier quoted context omitted.

> What if you sidestepped all the chip cleverness and just put cameras to capture the name, CC number, expiration and 3 digits? Apple Cards have just the name on them, which is a nice step in the right direction. (No contactless, though, which is weird.)

Why would you need it, you've got an iPhone right? (semi serious here - I'm sure they want you to use Apple Pay)

There is a little thing called COVID. All my main payment cards are contactless now. I am not an Apple card customer.

Re: Is your chip card secure? Much depends on where you bank

#17
post #2

What if you sidestepped all the chip cleverness and just put cameras to capture the name, CC number, expiration and 3 digits? You'd still need a billing address I guess, but you might be able to get that by looking up the name and disambiguating using the location of the terminal.

> What if you sidestepped all the chip cleverness and just put cameras to capture the name, CC number, expiration and 3 digits? Apple Cards have just the name on them, which is a nice step in the right direction. (No contactless, though, which is weird.)

My credit union cards still have the old-style credit card number on the front (but no raised digits for the ker-chunk machine). My Chase card has the numbers in small type on the back in a non-contrasty color. It's not possible to read in non-ideal lighting conditions.

Re: Is your chip card secure? Much depends on where you bank

#18
post #12

Earlier quoted context omitted.

Why would you need it, you've got an iPhone right? (semi serious here - I'm sure they want you to use Apple Pay)

There is a little thing called COVID. All my main payment cards are contactless now. I am not an Apple card customer.

I'm not an Apple card customer either, but I use Apple pay with my cards usually on my watch, although once in a while it doesn't work at a terminal and I have to pull out my phone (which is annoying since facial recognition doesn't work with a mask on). I understand similar things exist for Android.

Re: Is your chip card secure? Much depends on where you bank

#19
post #12

Earlier quoted context omitted.

> What if you sidestepped all the chip cleverness and just put cameras to capture the name, CC number, expiration and 3 digits? Apple Cards have just the name on them, which is a nice step in the right direction. (No contactless, though, which is weird.)

Why would you need it, you've got an iPhone right? (semi serious here - I'm sure they want you to use Apple Pay)

A contactless card just proves physical possession of the card. An Apple Pay payment means that a password or biometric authentication was performed, AND possession of the device, which raises the barrier to fraud. So there is a good reason to wanting to discourage the use of the card when possible.

Re: Is your chip card secure? Much depends on where you bank

#20
post #17

Earlier quoted context omitted.

> What if you sidestepped all the chip cleverness and just put cameras to capture the name, CC number, expiration and 3 digits? Apple Cards have just the name on them, which is a nice step in the right direction. (No contactless, though, which is weird.)

My credit union cards still have the old-style credit card number on the front (but no raised digits for the ker-chunk machine). My Chase card has the numbers in small type on the back in a non-contrasty color. It's not possible to read in non-ideal lighting conditions.

But I rarely take either card out of my wallet. I use Apple Pay almost everywhere.
Post reply on HN