Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Card Breaches at Car Washes

krebsonsecurity.com

Post reply on HN
Print view View original

41–45 of 45 posts

Re: Card Breaches at Car Washes

#41

Post by philoktet »

burial wrote: post #14

“The clerk told me they would come into the store in pairs, using multiple credit cards until one of them was finally approved, at which point they’d buy $500 each in prepaid gift cards,” "We have two Family Dollar stores in Everett and a bunch in the surrounding area, and these guys would come in three to four times a week at each location, laundering money from stolen cards" You would have thought they would report…

Yeah, but this was a "dollar store", which in the US typically exist to serve low-income areas. Unfortunately, "snitches get stitches" is a pretty common attitude in these areas. Source: years living in said areas.

Re: Card Breaches at Car Washes

#42

Post by wglb »

kijin wrote: post #10
hyperion2010 wrote: post #6

One of the most striking things to me is this sentence: "Trustwave and other companies that get hired to investigate breaches involving card data is that far too many point-of-sale breaches start when the thieves abuse some kind of remote access tool installed on the point-of-sale device itself." We have an incredibly secure and successful piece of remote access software (ssh) that is used on billions of computers an…

SSH is no better than some random Windows-based remote admin tool if the same default password is used.

Well, it is better, since SSH doesn't come with a default password, and you can disable the use of passwords in SSHD.

Re: Card Breaches at Car Washes

#43

Post by sanswork »

hga wrote: post #35
eropple wrote: post #33

Earlier quoted context omitted.

Cash means having to carry cash, count change, reorganize bills, so on and so forth. Checks mean having to write checks and earning the everlasting (and justified) emnity of everyone behind you in line because you're wasting their time. Credit cards mean a swipe (debit cards add a PIN, oh noes) and indemnity against the fraud that occasionally blows up. Cash loses. Checks lose hard .

Checks are only for big purchases, with vendors who know me well. Last was in 2008, for a washer and dryer bought from a GE dealership who's building was purchased from my family decades ago. If there's a potential for a line, or a vendor who doesn't know me from Adam, as when I bought a water softener, I do use a credit card. I personally think the overhead for routine use of cash is roughly equivalent to routinely…

I think the counting cash is more on the merchant side. Managing, securing and depositing cash in your account isn't free(and the cost does often change with the amount).

The fact that you haven't needed to do a chargeback doesn't mean you haven't benefited from the existence of them. The fear of a chargeback forces merchants to act in your best interest.

What hassle did your brother experience with the breach did he not just have a replacement card mailed out?

Re: Card Breaches at Car Washes

#44

Post by hga »

sanswork wrote: post #43
hga wrote: post #35

Earlier quoted context omitted.

Checks are only for big purchases, with vendors who know me well. Last was in 2008, for a washer and dryer bought from a GE dealership who's building was purchased from my family decades ago. If there's a potential for a line, or a vendor who doesn't know me from Adam, as when I bought a water softener, I do use a credit card. I personally think the overhead for routine use of cash is roughly equivalent to routinely…

I think the counting cash is more on the merchant side. Managing, securing and depositing cash in your account isn't free(and the cost does often change with the amount). The fact that you haven't needed to do a chargeback doesn't mean you haven't benefited from the existence of them. The fear of a chargeback forces merchants to act in your best interest. What hassle did your brother experience with the breach did he…

The details of the hassle weren't mentioned, but if one of mine was breached there would be accounts charging recurring payments that would need the new numbers.

It also took a long while for the breach to be realized, they might have had issues with bogus charges on their cards. And it would be at least two cards, one each for him and his wife.

Re: Card Breaches at Car Washes

#45

Post by sanswork »

hga wrote: post #44
sanswork wrote: post #43

Earlier quoted context omitted.

I think the counting cash is more on the merchant side. Managing, securing and depositing cash in your account isn't free(and the cost does often change with the amount). The fact that you haven't needed to do a chargeback doesn't mean you haven't benefited from the existence of them. The fear of a chargeback forces merchants to act in your best interest. What hassle did your brother experience with the breach did he…

The details of the hassle weren't mentioned, but if one of mine was breached there would be accounts charging recurring payments that would need the new numbers. It also took a long while for the breach to be realized, they might have had issues with bogus charges on their cards. And it would be at least two cards, one each for him and his wife.

Credit card companies now a days tend to keep the existing recurring payments going even when they cancel your card for these types of reasons up until it would normally expire so thats not a real problem any more.

If they had bogus charges it would have been dealt with the same as any credit card fraud. They would sign a statement that they didn't make the charges. The funds would be reversed and they'd be sent new cards.

The fact that they know its related to Target means they probably didn't have those issues.

Post reply on HN