Just imagine how financially successful these folks could be if they put halve that amount of effort into some legitimate projects. =)
Crazy Thin ‘Deep Insert’ ATM Skimmers
281–290 of 484 posts
Re: Crazy Thin ‘Deep Insert’ ATM Skimmers
#282This makes me wonder who manufactures these. Are they made as custom devices by a criminal group to commit the crime? Are they manufactured in another country -yes, that one- and you can buy them on the darknet? Did the group buy one of these ATMs to build the skimmer or possibly get inside information from someone at the company?
You don't even need the darknet; there are plenty of clearnet carding forums. Just search "carding forums" — they're right there, hanging about in the open, all Google-visible and everything. (There are dark-web ones, too, but they're not really any different than the clearnet ones.)
From a few cursory searches, it seems like 1. people generally build their own skimming tools by following guides; and 2. this isn't organized crime, but usually just some really obsessive individuals thinking they can get rich quick.
(If you think about it, the incentives for selling the skimming tools themselves are all wrong: if someone with sloppy OpSec buys your tool and uses it, and it gets into the bank's hands to be studied, they've now ruined it for all your other customers.)
Re: Crazy Thin ‘Deep Insert’ ATM Skimmers
#283Earlier quoted context omitted.
So you mention lower in the thread that in fact you didn't get the new Apple magnetic wallet, but actually a 3rd party wallet and just assume Apple's will have the same problem. That seems like a distinction worth mentioning, especially with the first comment on the article. While it seems reasonable that Apple's wallet might have the same problem, you dont actually know.
Yes I didn’t realize how seriously people would view this until after I could no longer edit the comment. I mostly thought my story was funny. Though it is true that my Popwallet demagnetized my cards due to the ease with which once can accidentally contact the non shielded exterior of the magnetic wallet with the magnetic card. As I said down thread, apple intentionally designed a wallet that has to have relatively…
Your original comment was funny, and the ones making fun of you for the sort of important, uh, tweaked detail are also funny, so you are 2 for 2 if the intent was to be lighten hearts.
Re: Crazy Thin ‘Deep Insert’ ATM Skimmers
#284Earlier quoted context omitted.
As the article says, some smaller outfits still use card stripe data. The impetus to get retailers to start using the chip was "Liability shift". The payment networks gradually changed the rules (I think in the US pay-at-pump gasoline purchases were last to get this, while big retail stores were earlier) so that the liability if a transaction is latterly discovered to be fraudulent is with the retailer who accepted t…
> Those old impression machines? Good point. Not only do I still have cards with mag stripes, I still have some with embossed numbers. And probably half of the people with credit cards are younger than the date when that was obsoleted.
I definitely had an impression made after I moved to where I live now, which was 2005. Unless half the people with credit cards are 17...
Re: Crazy Thin ‘Deep Insert’ ATM Skimmers
#285Funny, sawthisbon discover and immediately wondered if this was on HN. Anyway, I have a few of these I use for pentests / audits https://electroniccats.com/store/huntercat/ I've caught and reported two pumps at fuel stations near where I live. One of them I watcheded when the police showed up and with the fuel station employee removed the ble module storing the data.
That's cool!
I think though for gas pump skimmers, there are devices that plug into the pins of the OEM card reader and just copy the data straight from the OEM card reader. (The thieves just get a universal gas pump key to open up the cover and install their device inside the pump, which is why you see those tamper stickers.)
Re: Crazy Thin ‘Deep Insert’ ATM Skimmers
#286Earlier quoted context omitted.
Cryptocurrencies, NFTs, and web3 are all immature technologies.
In most Asian countries ATM cards are a thing of the past. QR scanning is easier, more reliable and significantly safer
As far as technology is concerned, QR codes are far less advanced or secure than EMV.
The only thing it compares favorably (and I’m being generous) to in terms of payment security is magstripes, which is a 1960s technology.
QR codes have basically no inherent security. They are just barcodes in two dimensions. You can do physical MITM attacks on them very easily.
For instance: https://www.techinasia.com/fake-qr-code-scams-china
Re: Crazy Thin ‘Deep Insert’ ATM Skimmers
#287This is why I really like the added security of the new Apple magnetic wallet I got. The wallet holds your cards and attaches to the back of the phone using magnets. While the inside of the wallet is magnetically shielded, I’ve found it’s nearly impossible when actually handling the magnetic wallet not to accidentally pass the card past the outside of the magnetic wallet. I have found that my card no longer works in…
[deleted]
Re: Crazy Thin ‘Deep Insert’ ATM Skimmers
#288Earlier quoted context omitted.
You must be in the US -- America is the only place where mag stripe still exists. Everyone else is using tap or chip and pin.
Do you mean that credit cards in other countries don't have magnetic stripes, or just that nobody uses them? Living in Canada, there's basically no instance where we'd swipe our credit cards, but they've still got mag stripes; and when I visit the US, I sometimes have to swipe my card, and it does work to do so.
I’m in the UK, my cards still have the stripes but in my entire life (I’m 27) I’ve never used it. I don’t even think the card payment terminals we have here have the reader for the stripe anymore.
Re: Crazy Thin ‘Deep Insert’ ATM Skimmers
#289Earlier quoted context omitted.
You must be in the US -- America is the only place where mag stripe still exists. Everyone else is using tap or chip and pin.
Do you mean that credit cards in other countries don't have magnetic stripes, or just that nobody uses them? Living in Canada, there's basically no instance where we'd swipe our credit cards, but they've still got mag stripes; and when I visit the US, I sometimes have to swipe my card, and it does work to do so.
> Do you mean that credit cards in other countries don't have magnetic stripes, or just that nobody uses them?
I don't know about other countries, but a few days ago I got a new Visa card in France. It still has the magnetic stripe. I'm not sure if I've ever seen it used here, but a few years ago I think they were still in use in German gas stations (at least).
Some banks have a nice feature where they allow you to disable the magnetic strip of the card. I presume the information is still physically on the card, but they can somehow know that the payment was done that way and decline it.