Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Crazy Thin ‘Deep Insert’ ATM Skimmers

krebsonsecurity.com

Post reply on HN
Print view View original

121–130 of 484 posts

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#121

Post by 2muchcoffeeman »

mbreese wrote: post #105
noirbot wrote: post #90

Earlier quoted context omitted.

If you go anywhere where they hold a tab open, such as a bar, you can't do that with tap/chip. Not that that's a blocker, since worst case you do a bunch of single transactions, but it's an annoyance.

Originally I was thinking they could handle an open tab like a gas station — place a hold on the card for $X for an open tab. But then, the more I thought about it, I’m not sure I want to be the bartender that has to explain why there was a hold of $100 on a college kid’s debit card. Sorry you can’t buy lunch, but the hold will get released in a few days, so it’s ok! There’s got to be a better way…

You could just prepay $X. Then extend it every so often. Any remainder gets refunded at the end. Honestly, in Australia I have not swiped my CC in over a decade.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#122

Post by dleslie »

willhackett wrote: post #34

I think the magnetic strip needs to go. We hardly use them in Australia to the point where one of our major banks actually has a touch reader on their machine. Some sort of one-time verification would be great. An SMS or a push notification would go a long way to making this type of scraping harder. Or eliminate the card altogether - Cardless Cash.

I have no idea why, but chip cards always fail on me within six months of receiving a new one. Been this way for years.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#124

Post by [deleted] »

woodruffw wrote: post #45
kQq9oHeAz6wLLS wrote: post #35

Earlier quoted context omitted.

> Already there are a (small) number of modern restaurants that don't accept cash in my area. Is that even legal?

It isn't in NYC[1]. We have some local businesses that ignore the law, and are (supposedly) being fined daily for continuing to violate it[2]. I'm not sure if the city has managed to collect yet. [1]: https://legistar.council.nyc.gov/LegislationDetail.aspx?ID=3... [2]: https://nypost.com/2021/12/04/nyc-businesses-told-to-pay-up-...

[deleted]

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#126

Post by 2muchcoffeeman »

bmitc wrote: post #115
naet wrote: post #24

Earlier quoted context omitted.

I love using cash. Sometimes I don't when my local ATM is down (which seems to happen so often...), but when I can it feels much better to me. No digital records, no potential for this type of skimmer or other scam, don't have to give up my ATM pin, no worrying about my phone running out of charge, able to give it away freely to anyone in need without setting up a digital transfer, the old taco truck still only takes…

> No digital records, no potential for this type of skimmer or other scam I don't understand. How are you not exposed to this type of skimmer when it only attacks those who use cash ATMs, like what you do?

In Australia, day to day you can get up to $100 cash out at the grocery store. I think this is safer than the ATM since the readers are generally in use all the time so there is less chance that they have been tampered with. At least, I've never heard of someone getting their card details stolen at the supermarket. And I have heard plenty of ATMs around me being compromised.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#127

Post by nicoburns »

RockRobotRock wrote: post #77
TaylorAlexander wrote: post #46

This is why I really like the added security of the new Apple magnetic wallet I got. The wallet holds your cards and attaches to the back of the phone using magnets. While the inside of the wallet is magnetically shielded, I’ve found it’s nearly impossible when actually handling the magnetic wallet not to accidentally pass the card past the outside of the magnetic wallet. I have found that my card no longer works in…

I can see how this is annoying, but I think I use the magstripe 1 time per year on average. Although, I could see it being used more often by bartenders and other merchants who take my card.

I live in the UK, and I don’t think I’ve used my mag stripe here once in the last decade. The only time I can remember using it was on a plane.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#128

Post by toast0 »

seanp2k2 wrote: post #25

Is anyone else annoyed that: - We could have had chip & PIN, but for some reason (I'm guessing it's to do with how merchants take the hit for card fraud and VISA + MC think having to punch in a few numbers each sale will lead to fewer sales) - Those tap targets on CC readers sometimes aren't where the antenna is, and you have to rub your card all over the reader to get it to work? - Chip transactions take way longer…

How am I supposed to remember good PINs for the tenish payment cards in my wallet without writing them down (probably on the card itself), setting them all to the same thing, or setting them to poor choices?

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#129

Post by showerst »

function_seven wrote: post #100
daniel-cussen wrote: post #92

Earlier quoted context omitted.

Well a restaurant bill is in some sense a debt for the food that was already provided.

I'd love to see what happens if I eat a meal, then say, "Sorry, I only have cash." They can be mad about it, but I don't think I'm breaking any laws by not having their preferred payment method to pay that debt, right? They can even ban me from the restaurant but—for that meal—I can't get charged with theft of services (or whatever the innkeeper laws are that relate to this situation)

The ones I’ve seen that don’t take cash are fast food where you don’t get your meal until after paying. Sweetgreen, for example.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#130

Post by ruskyhacker »

Funny, sawthisbon discover and immediately wondered if this was on HN.

Anyway, I have a few of these I use for pentests / audits https://electroniccats.com/store/huntercat/

I've caught and reported two pumps at fuel stations near where I live. One of them I watcheded when the police showed up and with the fuel station employee removed the ble module storing the data.

Post reply on HN