Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Crazy Thin ‘Deep Insert’ ATM Skimmers

krebsonsecurity.com

Post reply on HN
Print view View original

171–180 of 484 posts

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#171

Post by sigmoid10 »

Aperocky wrote: post #83
TaylorAlexander wrote: post #46

This is why I really like the added security of the new Apple magnetic wallet I got. The wallet holds your cards and attaches to the back of the phone using magnets. While the inside of the wallet is magnetically shielded, I’ve found it’s nearly impossible when actually handling the magnetic wallet not to accidentally pass the card past the outside of the magnetic wallet. I have found that my card no longer works in…

Can't have a mag stripe vulnerability if there is no more mag stripe, such simple and elegant solution is tradition for Apple (can't have a broken home button when you don't have one!)

Mag stripe needs to die anyways. It is such a glaring security issue, I openly welcome any effort towards getting rid if it.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#172

Post by justsomehnguy »

bri3d wrote: post #157
samatman wrote: post #143

Earlier quoted context omitted.

Do you not give them the card, then they swipe it once at the end and you get it back? How does a stripe affect that?

There are a large number of “smart” tab systems in use in US bars where the system retains your magnetic stripe data for the duration of your visit. You pass off your card, it is swiped and immediately returned. If you don’t settle your tab, it’s automatically settled with a pre-set tip using the stored track data. It’s convenient for bar owners and patrons as the bar doesn’t have leftover cards to deal with and the…

>> It’s convenient for bar owners and patrons

LOL. It's convenient for bar owners. Patrons doesn't give a shit about that.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#173

Post by kevin_thibedeau »

TaylorAlexander wrote: post #99
bob1029 wrote: post #82

Earlier quoted context omitted.

Those must have been some low-coercivity card stock. HiCo cards should be very resilient to this sort of thing.

Brand new Visa Debit card from Chase Bank. I’d have thought it was one of the good ones. I should say I’m actually not using the official Apple magnetic case but the Popwallet brand which includes a little finger holder thing. Perhaps they’re using more powerful magnets than apple.

This is the type with the silver stripe printed on rather than embedded in the plastic?

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#174

Post by Macha »

giantg2 wrote: post #166
Macha wrote: post #152

Earlier quoted context omitted.

I've seen a few people in the US mention "when the chip isn't working". I don't think I've encountered this... ever? Of course, when the merchant's only alternative is handling cash, maybe there's more incentive to keep the card machine in order

I have chip malfunctions at least once per month. I assume there is dirt or debris in the terminal or on the chip.

I find it odd that they're so unreliable in the US given they're neither new nor complicated technology and have a decade of use in Europe before they even started gaining adoption in the US, but I'll take your word for it. I wonder what US card or terminal manufacturers are doing wrong for such a reliability difference

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#175

Post by kube-system »

tialaramex wrote: post #96
kube-system wrote: post #56

Earlier quoted context omitted.

> Those old impression machines? Good point. Not only do I still have cards with mag stripes, I still have some with embossed numbers. And probably half of the people with credit cards are younger than the date when that was obsoleted.

A hotel I stayed at actually made an impression from my card in... I'm going to say maybe 2015 (I'm pretty sure this is before Trump, but it's after Marvel started re-publishing Miracleman). Hotel somewhere in the middle of Nottingham. Room nice enough, but no actual card machine.

That’s wild. Last time I saw one in the US was a family owned gas station around 2000.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#176

Post by kevin_thibedeau »

Mountain_Skies wrote: post #140
bryan0 wrote: post #9

It's crazy how I never carry cash anymore. I can't even think of the last time I used an ATM. I often just leave the house with my phone and buy stuff with apple pay. Also how is magnetic strip still a thing? I thought this was replaced with chip and tap years ago...

The Dairy Queen I stopped by today used a mag strip reader but it is becoming increasingly uncommon. The local grocery store had to revert to using it twice last year when there was something wrong with the chip approval process. This was on all registers so I don't think it was the readers themselves that were the issue unless perhaps they had received a bad update that was later corrected. But it does seem like the…

Gas stations are the worst offenders at not upgrading to chip readers.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#177

Post by bri3d »

justsomehnguy wrote: post #172
bri3d wrote: post #157

Earlier quoted context omitted.

There are a large number of “smart” tab systems in use in US bars where the system retains your magnetic stripe data for the duration of your visit. You pass off your card, it is swiped and immediately returned. If you don’t settle your tab, it’s automatically settled with a pre-set tip using the stored track data. It’s convenient for bar owners and patrons as the bar doesn’t have leftover cards to deal with and the…

>> It’s convenient for bar owners and patrons LOL. It's convenient for bar owners. Patrons doesn't give a shit about that.

When the alternative is “hold onto the card” and you have to track it down or order a new one, sure it’s more convenient for the customer too…

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#178

Post by hamburglar »

dleslie wrote: post #122
willhackett wrote: post #34

I think the magnetic strip needs to go. We hardly use them in Australia to the point where one of our major banks actually has a touch reader on their machine. Some sort of one-time verification would be great. An SMS or a push notification would go a long way to making this type of scraping harder. Or eliminate the card altogether - Cardless Cash.

I have no idea why, but chip cards always fail on me within six months of receiving a new one. Been this way for years.

I find it's the chip readers that are very flaky. Certain stores I go to simply have unreliable chip readers and I often have to fall back to the stripe. This has even happened at a couple places right after they replaced their readers. It seems to be related to alignment of the card in the slot, which has led me to a procedure that on the second try, I'll put the card in while sliding it pressed against the left edge of the slot, and on the third try I'll slide it in on the right edge of the slot. This small bit of offset often makes the difference.

I suppose after the stripe goes away, they'll have to improve these machines in a hurry. I just don't understand how they're so shitty and yet the rest of the world seems to be using them without issue.

Re: Crazy Thin ‘Deep Insert’ ATM Skimmers

#179

Post by justsomehnguy »

Mountain_Skies wrote: post #140
bryan0 wrote: post #9

It's crazy how I never carry cash anymore. I can't even think of the last time I used an ATM. I often just leave the house with my phone and buy stuff with apple pay. Also how is magnetic strip still a thing? I thought this was replaced with chip and tap years ago...

The Dairy Queen I stopped by today used a mag strip reader but it is becoming increasingly uncommon. The local grocery store had to revert to using it twice last year when there was something wrong with the chip approval process. This was on all registers so I don't think it was the readers themselves that were the issue unless perhaps they had received a bad update that was later corrected. But it does seem like the…

> used a mag strip reader

My recent cards (and not only mine, I saw that happen with others people cards too) just tell the terminal they can't be used by a mag stripe at all. I assume what the terminal without a smartcard/payless should allow a mag strip read, but I haven't seen them for like... 10 years? But I'm not in the US of A, for that matter.

Post reply on HN