Live data from Hacker News

MagSpoof: Wireless Magstrip Spoofer

github.com

1–10 of 105 posts

Re: MagSpoof: Wireless Magstrip Spoofer

#6
post #4

Is this basically the same thing that Samsung smartphones used to do that allowed you to pay at swipe-only terminals?

> as well as learn about and create your own devices similar to other existing, commercial technologies such as Samsung MST and Coin

Yup

Re: MagSpoof: Wireless Magstrip Spoofer

#7
post #5

I long for the day I can carry my phone or watch without needing keys or wallet. The fact that most adults carry at least 3 things (keys/phone/wallet) at all times in 2022 is crazy.

Agreed completely, but keys/IDs work 100% of the time. Even if virtual versions work 99% of the time, that's still not enough.

Re: MagSpoof: Wireless Magstrip Spoofer

#9
Although you can disable the bits in the service code pertaining to the cards ICC capabilities, in theory there's a good chance that the track2 equivalent data on the chip is different from the track2 data on the magstrip. That would make it easy for the issuer to determine that the track2 has been modified and reject the transaction and/or flag the account for fraudulent activity.

Re: MagSpoof: Wireless Magstrip Spoofer

#10
post #5

I long for the day I can carry my phone or watch without needing keys or wallet. The fact that most adults carry at least 3 things (keys/phone/wallet) at all times in 2022 is crazy.

I agree it would be convenient. But consider the new dangers: 1) pickpocketing would suddenly be 3x as profitable and 3x as easy, 2) lose one thing and you've lost everything, 3) if one thing stops working, everything stops working, 4) venues where you have to give up your phone means carrying extra cash in.... a wallet, 5) cybercriminals can now steal much more from you without ever getting near you, 6) I imagine there will never be a universal standard for these things so changing vendor will be quite difficult.
Post reply on HN