Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Crazy Thin ‘Deep Insert’ ATM Skimmers

krebsonsecurity.com

Post reply on HN
Print view View original

181–190 of 484 posts

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#181

Post by adventured »

Macha wrote: post #152
giantg2 wrote: post #81

Earlier quoted context omitted.

The small number of places with older swipe only terminals. Or when the chip isn't working (Lowes has a stripe reader on the register if the main terminal isn't working; mainly used for gift cards though). And finally, an alert employee might not accept a damaged card.

I've seen a few people in the US mention "when the chip isn't working". I don't think I've encountered this... ever? Of course, when the merchant's only alternative is handling cash, maybe there's more incentive to keep the card machine in order

When it comes to dipping the chip, it can wear down after a lot of use and stop functioning. I've never run into a problem with tapping however.

Here's an example image from a NY Times story about chips wearing down:

https://i.imgur.com/XlKEBsc.jpg

The last card I replaced due to chip wear, the chip looked even worse than that.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#184

Post by Reason077 »

bri3d wrote: post #157
samatman wrote: post #143

Earlier quoted context omitted.

Do you not give them the card, then they swipe it once at the end and you get it back? How does a stripe affect that?

There are a large number of “smart” tab systems in use in US bars where the system retains your magnetic stripe data for the duration of your visit. You pass off your card, it is swiped and immediately returned. If you don’t settle your tab, it’s automatically settled with a pre-set tip using the stored track data. It’s convenient for bar owners and patrons as the bar doesn’t have leftover cards to deal with and the…

Interesting, I haven't encountered such a system at UK bars/pubs. Either it's entirely pay-as-you-go (easy when everyone has contactless), or, at fancier places, they'll trust you to run a tab without taking a card up front.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#185

Post by girvo »

giantg2 wrote: post #166
Macha wrote: post #152

Earlier quoted context omitted.

I've seen a few people in the US mention "when the chip isn't working". I don't think I've encountered this... ever? Of course, when the merchant's only alternative is handling cash, maybe there's more incentive to keep the card machine in order

I have chip malfunctions at least once per month. I assume there is dirt or debris in the terminal or on the chip.

That's wild. We've had chips on our cards in Australia for gosh-knows how long at this point, and I honestly cannot remember the last time it failed.

Not that they're even used that often these days either: everything is just tap-and-go NFC payment now.

And I do mean everything!

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#186

Post by iglio »

hammock wrote: post #59
TaylorAlexander wrote: post #46

This is why I really like the added security of the new Apple magnetic wallet I got. The wallet holds your cards and attaches to the back of the phone using magnets. While the inside of the wallet is magnetically shielded, I’ve found it’s nearly impossible when actually handling the magnetic wallet not to accidentally pass the card past the outside of the magnetic wallet. I have found that my card no longer works in…

With just about everything either chip or tap now, is there any danger in just scratching out the mag stripe of my cards?

Some banks even disable the mag strip by default [1], in the UK at least, allowing you to turn it back on temporarily if you need to.

[1] https://monzo.com/help/monzo-card-pin/what-is-magstripe

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#188

Post by Reason077 »

Macha wrote: post #174
giantg2 wrote: post #166

Earlier quoted context omitted.

I have chip malfunctions at least once per month. I assume there is dirt or debris in the terminal or on the chip.

I find it odd that they're so unreliable in the US given they're neither new nor complicated technology and have a decade of use in Europe before they even started gaining adoption in the US, but I'll take your word for it. I wonder what US card or terminal manufacturers are doing wrong for such a reliability difference

Chip payments occasionally had problems in Europe too. The chips on the cards, or the contacts on the terminals would get dirty or wear out or whatever. Contactless is much more reliable.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#189

Post by justsomehnguy »

willhackett wrote: post #34

I think the magnetic strip needs to go. We hardly use them in Australia to the point where one of our major banks actually has a touch reader on their machine. Some sort of one-time verification would be great. An SMS or a push notification would go a long way to making this type of scraping harder. Or eliminate the card altogether - Cardless Cash.

> I think the magnetic strip needs to go

As a person who was quite amused by a [quite gentry, ie recently entered the workforce afain] Domino's staff who didn't even knew how to handle a magstripe in 2016 I find this is quite baffling.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#190

Post by timo555 »

divbzero wrote: post #54

I like how this old-fashioned security measure still applies: Lastly but most importantly, covering the PIN pad with your hand defeats one key component of most skimmer scams: The spy camera that thieves typically hide somewhere on or near the compromised ATM to capture customers entering their PINs.

Another low-tech thing I have done to protect myself is I have physically cut the numbers off my cards with scissors. My name and expiration date are still there. This way when I pay at a restaurant in the US and the card is out of my sight I don't worry about someone writing down the card details. So far not a single business has refused me when I hand them my modified card with the numbers cut off.
Post reply on HN