And the question is... why not just use secure card swipe devices? You load an encryption key onto the hardware, and then key loggers don't work any more. Sure, it won't solve all your problems, but nothing does.
Nordstrom Finds Cash Register Skimmers
21–30 of 83 posts
Re: Nordstrom Finds Cash Register Skimmers
#22My debit card got skimmed at a gas station this past week. It was used that same day to make purchases in LA (about 3 hours south of me).
Now that this is happening in other types of retail stores, maybe it will spur the use of more secure options (chip and pin?).
Re: Nordstrom Finds Cash Register Skimmers
#23chip and fucking pin. sigh This problem is solved, yet practically nobody in the US is demanding the established solution. Until we do, this is only going to continue.
In the UK and EU, chip and pin carry with it some nasty liability problems. That is, the consumer is now de facto liable for all fraud that happens, in spite of the statute.[1] A significant amount of skimming still occurs in the EU.[2] The protocol, just like the traditional charge card method, used is considered insecure.[3] The U.S. method, where the low-security retailer is liable, is the most fair. The current c…
The n.1 you quoted there is very interesting and explains a little bit about all the types of transactions possible.
Very interesting subject.
Re: Nordstrom Finds Cash Register Skimmers
#24chip and fucking pin. sigh This problem is solved, yet practically nobody in the US is demanding the established solution. Until we do, this is only going to continue.
The US is getting chip cards in 2015 [0], although it looks to be chip and signature.
As another poster pointed out, chip and pin is not foolproof and may present a nasty liability shift to consumers when it comes to fraud.
There are also more practical issues with chip cards. First, merchants will be requires to buy new chip capable card readers. They will not be happy about it, but they'll be forced into it by their merchant agreements. Second, chip transactions take noticeably longer to process. From my casual observation a swipe takes 1-3 seconds, but chip readers took at least twice as long. Sounds silly, but it can really add up if there is a long line.
[0] http://www.transactionworld.net/articles/2011/november/innov...
Re: Nordstrom Finds Cash Register Skimmers
#25From technical standpoint very lame attack. There's no hacking involved at all. There has been technically much more sophisticated attacks modifying terminal hardware & firmware , off loading data completely out of band using 3g networks, etc. That's something that could be called hacking and proper (malhardware) engineering.
Re: Nordstrom Finds Cash Register Skimmers
#26My debit card got skimmed at a gas station this past week. It was used that same day to make purchases in LA (about 3 hours south of me). Now that this is happening in other types of retail stores, maybe it will spur the use of more secure options (chip and pin?).
Nobody is using MSR anymore, Chip & PIN + PCI stuff has been the norm for several payment terminal and card generations already. So like 10+ years.
Re: Nordstrom Finds Cash Register Skimmers
#27Earlier quoted context omitted.
I'll admit to doing similar at the self checkouts at my local supermarket. Quite happily put pink lady apples through as cheap ones. I started doing this after I watched a whole tray of pink lady apples go in a skip because they brought new produce out. The same is true of a lt of retail establishments. Old stock is destroyed to keep prices up.
In some countries, this is fraud as opposed to theft, leading to significantly higher penalties.
Yes I know. So throwing out tonnes of food is ok then to protect the value of it?
Re: Nordstrom Finds Cash Register Skimmers
#28Earlier quoted context omitted.
I work in the industry. Chip and pin is not statistically safer (fraud rates in Spain, UK, and US are all the same despite having very different payment landscapes). The fundamental problem is that in traditional chip-and-pin setups you also type the pin into the same machine... so adding a skimmer + video camera OR adding a skimmer that records pin is marginally possible and not that hard. The real security would co…
"fraud rates in Spain, UK," for what? Credit cards? Debit? There's always going to be fraud one way or another. "you also type the pin into the same machine... so adding a skimmer..." There's no copying of SIM Cards. Yes, you can still copy the magnetic stripe that's there for backwards compatibility. So, yes, it's not going to be safer while there's support for old technology. My (European) bank issued me a chip-and…
>There's no copying of SIM Cards.
I would be careful with such statement :-) Security usually maters on type of card, but top range is pretty expensive. There are number of ways howto 'debug' chip using power consumption, xrays etc...
It is easy to copy GSM SIM card. Also operators usually give replacement SIM ( if original gets lost) to anyone with photo id. There were number of frauds in Europe.
Re: Nordstrom Finds Cash Register Skimmers
#29And the question is... why not just use secure card swipe devices? You load an encryption key onto the hardware, and then key loggers don't work any more. Sure, it won't solve all your problems, but nothing does.
Doesn't help, like I mentioned above. There's no such thing as 'secure device'. Someone is always able to tamper with those.
Re: Nordstrom Finds Cash Register Skimmers
#30There is very little true security in retail establishments. This lady simply swapped bar codes on expensive items for bar codes of inexpensive items. Got away with it for over a year and made as much as $30,000 per month in some months: http://miami.cbslocal.com/latest-videos/?autoStart=true&topV...
I'll admit to doing similar at the self checkouts at my local supermarket. Quite happily put pink lady apples through as cheap ones. I started doing this after I watched a whole tray of pink lady apples go in a skip because they brought new produce out. The same is true of a lt of retail establishments. Old stock is destroyed to keep prices up.
I'll admit to being amazed that people like you exist. No sense of integrity or honor? Just selfish I guess?