Live data from Hacker News

Nearly All U.S. Home Depot Stores Hit By Credit Card Theft

krebsonsecurity.com

1–10 of 116 posts

Re: Nearly All U.S. Home Depot Stores Hit By Credit Card Theft

#3
I was at a home depot on September 1st and my credit card was declined for security reasons. I just moved to a different state, but I had no problem using the card at other stores that same day, including to make a larger purchase at the same mall as the home depot.

Re: Nearly All U.S. Home Depot Stores Hit By Credit Card Theft

#4

This is supposed to be much bigger than the Target breach. If this doesn't give the move to the more secure EMV chip and pin method in the US, nothing will.

I wish they would deny merchant accounts to merchants too cheap/lazy to roll out contactless payments alongside chip and pin. There's nothing more stupid and frustrating than holding up the line doing chip and pin to buy a $5 meal at Subway.

Re: Nearly All U.S. Home Depot Stores Hit By Credit Card Theft

#5
post #4

This is supposed to be much bigger than the Target breach. If this doesn't give the move to the more secure EMV chip and pin method in the US, nothing will.

I wish they would deny merchant accounts to merchants too cheap/lazy to roll out contactless payments alongside chip and pin. There's nothing more stupid and frustrating than holding up the line doing chip and pin to buy a $5 meal at Subway.

Does the US use some byzantine tech for chip and PIN? Entering the PIN is about as fast as signing the receipt, at least where I’m from. I doubt it’s much slower than paying cash. (I hand over my card. Card is inserted in reader. I enter my PIN and confirm. Transaction is confirmed after a couple seconds. That can’t be more than ten seconds or so.)

Re: Nearly All U.S. Home Depot Stores Hit By Credit Card Theft

#6
post #5
post #4

Earlier quoted context omitted.

I wish they would deny merchant accounts to merchants too cheap/lazy to roll out contactless payments alongside chip and pin. There's nothing more stupid and frustrating than holding up the line doing chip and pin to buy a $5 meal at Subway.

Does the US use some byzantine tech for chip and PIN? Entering the PIN is about as fast as signing the receipt, at least where I’m from. I doubt it’s much slower than paying cash. (I hand over my card. Card is inserted in reader. I enter my PIN and confirm. Transaction is confirmed after a couple seconds. That can’t be more than ten seconds or so.)

Most low-cost transaction don't require any signature - swipe and go.

I was surprised to find in Safeway recently that a < ~$20 transaction required no signature either.

Re: Nearly All U.S. Home Depot Stores Hit By Credit Card Theft

#7
post #4

This is supposed to be much bigger than the Target breach. If this doesn't give the move to the more secure EMV chip and pin method in the US, nothing will.

I wish they would deny merchant accounts to merchants too cheap/lazy to roll out contactless payments alongside chip and pin. There's nothing more stupid and frustrating than holding up the line doing chip and pin to buy a $5 meal at Subway.

To be fair to Home Depot, its self checkout systems have the most payment options of any system I've ever seen. They include feeding the machine a check, paying with PayPal, writing in a bank transfer, among something like a dozen payment mechanisms.

Re: Nearly All U.S. Home Depot Stores Hit By Credit Card Theft

#8
post #5
post #4

Earlier quoted context omitted.

I wish they would deny merchant accounts to merchants too cheap/lazy to roll out contactless payments alongside chip and pin. There's nothing more stupid and frustrating than holding up the line doing chip and pin to buy a $5 meal at Subway.

Does the US use some byzantine tech for chip and PIN? Entering the PIN is about as fast as signing the receipt, at least where I’m from. I doubt it’s much slower than paying cash. (I hand over my card. Card is inserted in reader. I enter my PIN and confirm. Transaction is confirmed after a couple seconds. That can’t be more than ten seconds or so.)

Before Canada implemented Chip and PIN, you usually didn't have to sign the receipt for those kind of small purchases. It takes at least 10x longer now to do the insert, type PIN, remove than just a swipe.

Re: Nearly All U.S. Home Depot Stores Hit By Credit Card Theft

#9
How is http://rescator.cc/ still online and facilitating the transactions when they are clearly selling stolen goods? I assume they are in Russia or similar. Are they using bitcoin, or do they actually use PayPal?

Their forum is also utterly amazing, and downrigh scary: https://lampeduza.so/

Would be interesting if payment processors such as Stripe, Braintree, Amazon Payments, and Balanced periodically got CC dumps, and proactively blacklisted cards before the issuing banks notice and decline.

Re: Nearly All U.S. Home Depot Stores Hit By Credit Card Theft

#10

This is supposed to be much bigger than the Target breach. If this doesn't give the move to the more secure EMV chip and pin method in the US, nothing will.

Having chipped cards would not prevent this. It would slow down criminals cloning cards but the numbers can still easily be used fraudulently online.
Post reply on HN