Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Crazy Thin ‘Deep Insert’ ATM Skimmers

krebsonsecurity.com

Post reply on HN
Print view View original

191–200 of 484 posts

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#191

Post by justsomehnguy »

hamburglar wrote: post #178
dleslie wrote: post #122

Earlier quoted context omitted.

I have no idea why, but chip cards always fail on me within six months of receiving a new one. Been this way for years.

I find it's the chip readers that are very flaky. Certain stores I go to simply have unreliable chip readers and I often have to fall back to the stripe. This has even happened at a couple places right after they replaced their readers. It seems to be related to alignment of the card in the slot, which has led me to a procedure that on the second try, I'll put the card in while sliding it pressed against the left edg…

As a person who used the chip for almost a decade I can assure you what or you had extremely shitty readers all your life or somehow you bank provided you with extremely shitty card somehow. I struggle to even remember when I needed to reinsert the card again.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#192

Post by leephillips »

naet wrote: post #24
bryan0 wrote: post #9

It's crazy how I never carry cash anymore. I can't even think of the last time I used an ATM. I often just leave the house with my phone and buy stuff with apple pay. Also how is magnetic strip still a thing? I thought this was replaced with chip and tap years ago...

I love using cash. Sometimes I don't when my local ATM is down (which seems to happen so often...), but when I can it feels much better to me. No digital records, no potential for this type of skimmer or other scam, don't have to give up my ATM pin, no worrying about my phone running out of charge, able to give it away freely to anyone in need without setting up a digital transfer, the old taco truck still only takes…

I don’t eat at those restaurants. I like cash, too.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#193

Post by stavros »

TaylorAlexander wrote: post #99
bob1029 wrote: post #82

Earlier quoted context omitted.

Those must have been some low-coercivity card stock. HiCo cards should be very resilient to this sort of thing.

Brand new Visa Debit card from Chase Bank. I’d have thought it was one of the good ones. I should say I’m actually not using the official Apple magnetic case but the Popwallet brand which includes a little finger holder thing. Perhaps they’re using more powerful magnets than apple.

It also wasn't actually a card with a magstripe. It may not have worked before, but it sure as hell didn't work after!

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#194

Post by stavros »

Reason077 wrote: post #170
nicoburns wrote: post #127

Earlier quoted context omitted.

I live in the UK, and I don’t think I’ve used my mag stripe here once in the last decade. The only time I can remember using it was on a plane.

Even EMV contactless is designed to work offline. There's no need for the mag stripe at all anymore unless you encounter a truly ancient card terminal. The last time I remember encountering one was at a toll booth in Italy around 2011 or so. And the transaction was immediately declined by my UK bank!

I've always wondered: What happens if I use a paused/canceled card on a plane? Do I just get the item for free?

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#195

Post by Spooky23 »

mlambie wrote: post #141
TaylorAlexander wrote: post #99

Earlier quoted context omitted.

Brand new Visa Debit card from Chase Bank. I’d have thought it was one of the good ones. I should say I’m actually not using the official Apple magnetic case but the Popwallet brand which includes a little finger holder thing. Perhaps they’re using more powerful magnets than apple.

So your point about Apple, is in fact, not about Apple at all. Cool.

Thanks to Apple, I had a bean burrito this afternoon that upset my stomach.

Not sure why iPhone engineering didn’t anticipate this happening, but the flatulence kept my boss away so everything worked out.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#196

Post by memco »

timo555 wrote: post #190
divbzero wrote: post #54

I like how this old-fashioned security measure still applies: Lastly but most importantly, covering the PIN pad with your hand defeats one key component of most skimmer scams: The spy camera that thieves typically hide somewhere on or near the compromised ATM to capture customers entering their PINs.

Another low-tech thing I have done to protect myself is I have physically cut the numbers off my cards with scissors. My name and expiration date are still there. This way when I pay at a restaurant in the US and the card is out of my sight I don't worry about someone writing down the card details. So far not a single business has refused me when I hand them my modified card with the numbers cut off.

Some companies issue their card without the numbers written on them so I don’t think it’ll be concern.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#197

Post by TaylorAlexander »

piva00 wrote: post #142
TaylorAlexander wrote: post #99

Earlier quoted context omitted.

Brand new Visa Debit card from Chase Bank. I’d have thought it was one of the good ones. I should say I’m actually not using the official Apple magnetic case but the Popwallet brand which includes a little finger holder thing. Perhaps they’re using more powerful magnets than apple.

> This is why I really like the added security of the new Apple magnetic wallet I got. > I should say I’m actually not using the official Apple magnetic case but the Popwallet brand I don't understand why you would start this comment thread with a false statement though.

A few reasons.

One, it is a light hearted comment. I’m mostly just having some fun. Two, I suspect that the official wallet would have the same problem. The point is that apple designed a system where the wallet has to have magnets in it. The official apple product documentation states that there are in fact magnets in their wallet. And yes, just like my Popwallet brand, the inside of Apple’s wallet is magnetically shielded. The issue comes when you are handling the small removable wallet and your cards together. If you place your card next to the side of the wallet with magnets, you’re exposing it to the magnet without any shielding to protect your card.

I don’t have an official Apple wallet to test, but Apple repeatedly makes the same claim as the Popwallet - that the inside of the wallet is shielded. I think the problem is that apple designed a system where cards and magnets are close together, and during handling it is easy to expose the card to the unshielded side. This is why I think it is appropriate to jab at apple.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#198

Post by TaylorAlexander »

mlambie wrote: post #141
TaylorAlexander wrote: post #99

Earlier quoted context omitted.

Brand new Visa Debit card from Chase Bank. I’d have thought it was one of the good ones. I should say I’m actually not using the official Apple magnetic case but the Popwallet brand which includes a little finger holder thing. Perhaps they’re using more powerful magnets than apple.

So your point about Apple, is in fact, not about Apple at all. Cool.

I’m mostly having fun, but Apple’s official wallet also has magnets on the back. The point is apple designed a system where a small removable wallet needs to be handled with your cards. That’s apple’s system design. And I suspect that you would encounter the same issue with Apple’s official wallet. Just like my Popwallet apple says the inside of the wallet is shielded. But the outside cannot be shielded as it has to magnetically attach to the phone. So unless the apple wallet has much weaker magnets, in which case it would fall off the phone easily, then it’s going to have the same issue. The problem is with the system apple designed.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#199

Post by onetimeusename »

This makes me wonder who manufactures these. Are they made as custom devices by a criminal group to commit the crime? Are they manufactured in another country -yes, that one- and you can buy them on the darknet? Did the group buy one of these ATMs to build the skimmer or possibly get inside information from someone at the company?

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#200

Post by LeonB »

dleslie wrote: post #122
willhackett wrote: post #34

I think the magnetic strip needs to go. We hardly use them in Australia to the point where one of our major banks actually has a touch reader on their machine. Some sort of one-time verification would be great. An SMS or a push notification would go a long way to making this type of scraping harder. Or eliminate the card altogether - Cardless Cash.

I have no idea why, but chip cards always fail on me within six months of receiving a new one. Been this way for years.

Do you work at a magnetron manufacturing plant?
Post reply on HN