Live data from Hacker News

Crazy Thin ‘Deep Insert’ ATM Skimmers

krebsonsecurity.com

51–60 of 484 posts

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#51
post #13

I use contactless to get money out of the ATM. It looks like they'd get my PIN in this method but they can't replicate the card, then, right?

when they get the pin they have a physical accomplice do a bump n dump on you for the card.

The final line of defence is my bank's ridiculously low max withdrawal amounts (I think it's like a fraction of a percent of my cash there).

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#52
post #30

Is anyone else annoyed that: - We could have had chip & PIN, but for some reason (I'm guessing it's to do with how merchants take the hit for card fraud and VISA + MC think having to punch in a few numbers each sale will lead to fewer sales) - Those tap targets on CC readers sometimes aren't where the antenna is, and you have to rub your card all over the reader to get it to work? - Chip transactions take way longer…

Contactless transactions using your phone are fast, secure and easy. Over time they will replace almost all current usage of chip & pin or magnetic stripe.

Sounds like a nightmare

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#53

This is why I really like the added security of the new Apple magnetic wallet I got. The wallet holds your cards and attaches to the back of the phone using magnets. While the inside of the wallet is magnetically shielded, I’ve found it’s nearly impossible when actually handling the magnetic wallet not to accidentally pass the card past the outside of the magnetic wallet. I have found that my card no longer works in…

I’ve had an Apple Wallet since they came out and never had any cards lose their magnetic strip. Same with my wife.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#54
I like how this old-fashioned security measure still applies:

Lastly but most importantly, covering the PIN pad with your hand defeats one key component of most skimmer scams: The spy camera that thieves typically hide somewhere on or near the compromised ATM to capture customers entering their PINs.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#55
post #49

Earlier quoted context omitted.

> Already there are a (small) number of modern restaurants that don't accept cash in my area. Is that even legal?

It must be in my area, and it seems to be legal at the federal level in the USA. "There is no federal statute mandating that a private business, a person, or an organization must accept currency or coins as payment for goods or services. Private businesses are free to develop their own policies on whether to accept cash unless there is a state law that says otherwise." https://www.federalreserve.gov/faqs/currency_127…

Interesting, thank you

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#56
post #9

It's crazy how I never carry cash anymore. I can't even think of the last time I used an ATM. I often just leave the house with my phone and buy stuff with apple pay. Also how is magnetic strip still a thing? I thought this was replaced with chip and tap years ago...

As the article says, some smaller outfits still use card stripe data. The impetus to get retailers to start using the chip was "Liability shift". The payment networks gradually changed the rules (I think in the US pay-at-pump gasoline purchases were last to get this, while big retail stores were earlier) so that the liability if a transaction is latterly discovered to be fraudulent is with the retailer who accepted t…

> Those old impression machines?

Good point. Not only do I still have cards with mag stripes, I still have some with embossed numbers. And probably half of the people with credit cards are younger than the date when that was obsoleted.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#57
I've always wondered about how modern contactless methods are more resistant to skimming. Couldn't someone compromise two machines and essentially MITM the NFC communcations, intercepting the card's response from the first machine, and replaying it against another remote machine, along with the PIN recorded from a camera? Though I suppose the ATM company could combat this by encoding the machine's ID or a nonce with the message that the card's smart chip responds to, so it only works when replayed on that first machine - is this what happens in practice?

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#58
post #9

It's crazy how I never carry cash anymore. I can't even think of the last time I used an ATM. I often just leave the house with my phone and buy stuff with apple pay. Also how is magnetic strip still a thing? I thought this was replaced with chip and tap years ago...

Card reader didn't work on the bus yesterday. It would have been nice to have a backup.

London buses don't even take cash any more.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#59

This is why I really like the added security of the new Apple magnetic wallet I got. The wallet holds your cards and attaches to the back of the phone using magnets. While the inside of the wallet is magnetically shielded, I’ve found it’s nearly impossible when actually handling the magnetic wallet not to accidentally pass the card past the outside of the magnetic wallet. I have found that my card no longer works in…

With just about everything either chip or tap now, is there any danger in just scratching out the mag stripe of my cards?

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#60
post #57

I've always wondered about how modern contactless methods are more resistant to skimming. Couldn't someone compromise two machines and essentially MITM the NFC communcations, intercepting the card's response from the first machine, and replaying it against another remote machine, along with the PIN recorded from a camera? Though I suppose the ATM company could combat this by encoding the machine's ID or a nonce with…

From my understanding you can't really skim these cards as the cards sign some piece of data using a private key stored only on the card that never gets exposed in the transaction. I might be _totally_ wrong though.
Post reply on HN