Live data from Hacker News

Nordstrom Finds Cash Register Skimmers

krebsonsecurity.com

31–40 of 83 posts

Re: Nordstrom Finds Cash Register Skimmers

#31
post #27
post #12

Earlier quoted context omitted.

In some countries, this is fraud as opposed to theft, leading to significantly higher penalties.

Yes I know. So throwing out tonnes of food is ok then to protect the value of it?

Your parents may have told you two wrongs don't make a right.

Re: Nordstrom Finds Cash Register Skimmers

#32
post #28

Earlier quoted context omitted.

"fraud rates in Spain, UK," for what? Credit cards? Debit? There's always going to be fraud one way or another. "you also type the pin into the same machine... so adding a skimmer..." There's no copying of SIM Cards. Yes, you can still copy the magnetic stripe that's there for backwards compatibility. So, yes, it's not going to be safer while there's support for old technology. My (European) bank issued me a chip-and…

>There's no copying of SIM Cards. I would be careful with such statement :-) Security usually maters on type of card, but top range is pretty expensive. There are number of ways howto 'debug' chip using power consumption, xrays etc... It is easy to copy GSM SIM card. Also operators usually give replacement SIM ( if original gets lost) to anyone with photo id. There were number of frauds in Europe.

"There are number of ways howto 'debug' chip using power consumption, xrays etc..."

The circuit on the chip is known, that's not important. The important thing is the information in rom. Difficult, but certainly not readable through x-ray.

"It is easy to copy GSM SIM card. Also operators usually give replacement SIM"

Of course they can give you a replacement SIM, they can reconfigure their systems to point the customer to the new SIM. That's not copying.

Actual copying would be more difficult.

Re: Nordstrom Finds Cash Register Skimmers

#33

My debit card got skimmed at a gas station this past week. It was used that same day to make purchases in LA (about 3 hours south of me). Now that this is happening in other types of retail stores, maybe it will spur the use of more secure options (chip and pin?).

Nobody is using MSR anymore, Chip & PIN + PCI stuff has been the norm for several payment terminal and card generations already. So like 10+ years.

What? Where is this? I don't think that you're talking about the gas station card readers in the US.

Re: Nordstrom Finds Cash Register Skimmers

#34
post #16

These are keyloggers and not skimmers, a skimmer looks something like this http://scams.wikispaces.com/file/view/camera02.jpg/30681221/...

Look up the guy whose blog this is. Also, it might help to read the article in full before blurting out trivialities.

I did read the article in full, also what does it matter who wrote it?

A skimmer and a keylogger are two very distinct things. When I read the title I was interested to find out how the skimmers were placed, placing a keylogger takes much less skill and craft, it's a piece you can buy in bulk, whereas placing a skimmer usually requires a different class of criminal, skimmers often have to be fabricated for each location.

Re: Nordstrom Finds Cash Register Skimmers

#35

Earlier quoted context omitted.

Nobody is using MSR anymore, Chip & PIN + PCI stuff has been the norm for several payment terminal and card generations already. So like 10+ years.

What? Where is this? I don't think that you're talking about the gas station card readers in the US.

Chip and pin has been widely used in Canada and Europe for a few years now.

Re: Nordstrom Finds Cash Register Skimmers

#36
I think a large factor in the lack of change in payment security (In the US anyway, I can't speak for anywhere else) is the rise of the "protected" card. I have no incentive to protect anything about my Amex.

Card got skimmed a few years ago somehow, Amex called, asked if I was in Nicaragua (I wasn't) they apologized, removed the $200 or so in charges and next-day aired me a new card. Almost zero hassle.

I'd hate to have my debit card skimmed but as far as a credit card... I'm not too worried. The risk isn't mine.

Re: Nordstrom Finds Cash Register Skimmers

#38
post #3

There is very little true security in retail establishments. This lady simply swapped bar codes on expensive items for bar codes of inexpensive items. Got away with it for over a year and made as much as $30,000 per month in some months: http://miami.cbslocal.com/latest-videos/?autoStart=true&topV...

An SAP Vice President was doing the same thing to steal Legos for resale:

http://www.paloaltoonline.com/news/2012/05/21/sap-palo-alto-...

Re: Nordstrom Finds Cash Register Skimmers

#39

My debit card got skimmed at a gas station this past week. It was used that same day to make purchases in LA (about 3 hours south of me). Now that this is happening in other types of retail stores, maybe it will spur the use of more secure options (chip and pin?).

Nobody is using MSR anymore, Chip & PIN + PCI stuff has been the norm for several payment terminal and card generations already. So like 10+ years.

> Nobody is using MSR anymore

The entire US still is, and that represents more transactions per day than happen in all of Europe.

Re: Nordstrom Finds Cash Register Skimmers

#40
post #10

Earlier quoted context omitted.

I'll admit to doing similar at the self checkouts at my local supermarket. Quite happily put pink lady apples through as cheap ones. I started doing this after I watched a whole tray of pink lady apples go in a skip because they brought new produce out. The same is true of a lt of retail establishments. Old stock is destroyed to keep prices up.

I'll admit to being amazed that people like you exist. No sense of integrity or honor? Just selfish I guess?

Hardly. Here's my perspective which will hopefully make you understand.

I live in a poverty stricken area. The supermarkets shove the following distribution of fruit out (I know this because my wife works in one as well):

- 20 bags of 5x apples for £1.89 each. 20% go in the bin.

- 100 pink lady apple at £0.75 each. 80% go in the bin.

- 20 cheap apples (one tray) at around £0.12 each. 0% go in the bin.

Now, why should I take the last single cheap apple which instantly prices out the poorer people which is clearly the intention of the supermarket which is to upsell to the pink ladies or bags of apples?

Fuck 'em to hell. There is no honour or integrity in capitalism. Trample over everyone to make profit.

I'm not selfish.

I'm not lacking integrity.

I'm not lacking honour.

Perhaps lacking in faith and respect for rules but that is my only crime.

Post reply on HN