Chipotle Reports Findings from Investigation of Payment Card Security Incident

Post by Veratyr » Fri, May 26, 2017, 9:43 PM UTC

mmanfrin wrote: post #13

heywire wrote: post #5

Hopefully this pushes more and more restaurants towards using separate chip-reader (EMV) pinpad devices. I've noticed several area restaurants switching lately (Arby's, Wendy's), and I hope it continues. These devices use point-to-point encryption, meaning that even if the POS machine is comprimised, no sensitive card data can be stolen. The POS machine never sees raw card data.

Chipreaders are terribly slow, I don't understand how they could not develop a secure payment system without 10-second~ delay times. My local grocery store installed new chip readers and within a week had taped over time in favor of the more-expensive but quicker stripe processing.

Post by sanswork » Fri, May 26, 2017, 9:51 PM UTC

Veratyr wrote: post #31

mmanfrin wrote: post #13

Earlier quoted context omitted.

Chipreaders are terribly slow, I don't understand how they could not develop a secure payment system without 10-second~ delay times. My local grocery store installed new chip readers and within a week had taped over time in favor of the more-expensive but quicker stripe processing.

Weirdly, I've only really noticed this in the US. Back in Australia where we've been using chips for about a decade, I rarely remember it taking more than a couple of seconds, certainly not 10. We also have contactless payment on most of our credit cards (as in built into the card, not Android/Apple Pay) and support for it on ~90% of terminals as well though so it's not much used anymore.

Post by ryanlol » Fri, May 26, 2017, 9:53 PM UTC

kingnothing wrote: post #34

icelancer wrote: post #30

Earlier quoted context omitted.

No, but it has been in the past. I'm speaking theoretically in general when people are wronged by things like this.

Your credit card company should offer a $0 liability policy for fraudulent charges. If not, switch card companies. Then it's their problem not yours.

Post by bpicolo » Fri, May 26, 2017, 10:03 PM UTC

mmanfrin wrote: post #13

heywire wrote: post #5

Hopefully this pushes more and more restaurants towards using separate chip-reader (EMV) pinpad devices. I've noticed several area restaurants switching lately (Arby's, Wendy's), and I hope it continues. These devices use point-to-point encryption, meaning that even if the POS machine is comprimised, no sensitive card data can be stolen. The POS machine never sees raw card data.

Chipreaders are terribly slow, I don't understand how they could not develop a secure payment system without 10-second~ delay times. My local grocery store installed new chip readers and within a week had taped over time in favor of the more-expensive but quicker stripe processing.

Post by Veratyr » Fri, May 26, 2017, 10:09 PM UTC

sanswork wrote: post #33

Veratyr wrote: post #31

Earlier quoted context omitted.

Weirdly, I've only really noticed this in the US. Back in Australia where we've been using chips for about a decade, I rarely remember it taking more than a couple of seconds, certainly not 10. We also have contactless payment on most of our credit cards (as in built into the card, not Android/Apple Pay) and support for it on ~90% of terminals as well though so it's not much used anymore.

American card terminals pretty much universally suck compared to everywhere else in the western world so it's not that surprising to me. According to staff at a few shops in my area when asked why they always ask if tap to pay is ok they said a lot of people still don't allow them to tap and insist on chip+pin still.