361–370 of 484 posts
Earlier quoted context omitted.
> Credit cards don't have a PIN They do in most countries.
In the US, most credit cards don't have PINs and if one does nobody/nothing ever asks for it. Debit cards, however, are downright nazis about PINs.
> However, there are a great many smaller businesses in the United States that still rely on being able to swipe the customer’s card. Who are these businesses? Seriously, stop issuing cards without chips and send new card readers to theses businesses. End of story. Is it because US businesses use deeply embedded card readers in custom POS machines that aren't modular? Everywhere I go in South America and Europe, busi…
What is scary though is how easily the rfid can be read off of a person. It's a great thing to have but card issuers should include some kind of protective sleeve with every card rather than relying on the consumer to be both aware of and able to use an rfid blocking wallet.
Earlier quoted context omitted.
You must be in the US -- America is the only place where mag stripe still exists. Everyone else is using tap or chip and pin.
Do you mean that credit cards in other countries don't have magnetic stripes, or just that nobody uses them? Living in Canada, there's basically no instance where we'd swipe our credit cards, but they've still got mag stripes; and when I visit the US, I sometimes have to swipe my card, and it does work to do so.
It's crazy how I never carry cash anymore. I can't even think of the last time I used an ATM. I often just leave the house with my phone and buy stuff with apple pay. Also how is magnetic strip still a thing? I thought this was replaced with chip and tap years ago...
Carrying cash is more common in NYC due to many small businesses there being cash-only. For instance, halal food carts are cash-only. As a result, there is higher ATM usage in NYC where these ATM skimmers were found.
Earlier quoted context omitted.
Do you not give them the card, then they swipe it once at the end and you get it back? How does a stripe affect that?
The whole "giving your card away" thing is so foreign to me (German). Fuck no, I’m not giving you my card. In restaurants and bars they either come by with their handheld terminal, or you go to the machine at the register and simply pay like in any other place.
I understand why Germany, a poorer country which was late to electronic payments, wouldn't do this; I don't understand the hostility to it. But then, I'm American, we've been doing this longer than you've been alive.
Is anyone else annoyed that: - We could have had chip & PIN, but for some reason (I'm guessing it's to do with how merchants take the hit for card fraud and VISA + MC think having to punch in a few numbers each sale will lead to fewer sales) - Those tap targets on CC readers sometimes aren't where the antenna is, and you have to rub your card all over the reader to get it to work? - Chip transactions take way longer…
That's why you usually need an external push to advance security. Manufacturers/businesses didn't drop CFC, lead, asbestos,... voluntarily, usually there's fierce resistance. Wireless tap payment terminals run for less than 50 bucks in retail stores, it's a negligible expense for any business (that's why you even see them among street vendors, restaurants where each waiter has their own terminal...).
> crooks can then clone payment cards and use them to siphon money from victim accounts at other ATMs. How? I thought all ATMs ignore the magstripe and just read the chip nowadays.
a) You can still run transactions as magstripe-only transactions (without any PIN or even signature required) or
b) copy the security code (which on most American cards are also encoded on the magstripe) and use it online (CNP transactions). If you're familiar with 3D secure, most American banks and merchants don't require 3D secure to buy.
This makes me wonder who manufactures these. Are they made as custom devices by a criminal group to commit the crime? Are they manufactured in another country -yes, that one- and you can buy them on the darknet? Did the group buy one of these ATMs to build the skimmer or possibly get inside information from someone at the company?
You don't even need the darknet; there are plenty of clearnet carding forums. Just search "carding forums" — they're right there, hanging about in the open, all Google-visible and everything. (There are dark-web ones, too, but they're not really any different than the clearnet ones.) From a few cursory searches, it seems like 1. people generally build their own skimming tools by following guides; and 2. this isn't or…