Live data from Hacker News

Target's EasySweep – Simplifying Skimmer Detection

tech.target.com

1–10 of 151 posts

Re: Target's EasySweep – Simplifying Skimmer Detection

#3

Why not publicly distribute the design? Because skimmer-makers might adapt? It seems trivial to acquire one (getting a job at Target or spoofing a corp email account isn't a high barrier).

It is, however, added friction, and that's 90% of the security game. Every additional layer helps. (And a corp email account adds a paper trail, at the very least)

Re: Target's EasySweep – Simplifying Skimmer Detection

#7
post #4

it allows any Target team member to easily sweep a store for skimmers I'm unclear on how this is supposed to help - unless the skimmers are being installed by frickin ninjas it seems like they already needed insider cooperation.

If you make sure who is doing the skimming rotates so that there is a constant stream of new people checking it would be really hard to stop detection in a timely manner. It's also insanely fast to install a skimmer (like 2 seconds fast) so you don't necessarily need insider help. Until wireless skimmers with a decent range become available this tool could bring skimming down to effectively zero (and reduce it to just the customer who rang through the till before it was discovered when they are available). It's a pretty epic addition to the retail security landscape

Re: Target's EasySweep – Simplifying Skimmer Detection

#8
post #4

it allows any Target team member to easily sweep a store for skimmers I'm unclear on how this is supposed to help - unless the skimmers are being installed by frickin ninjas it seems like they already needed insider cooperation.

Skimmer can be installed in seconds, just glued-on when the skimmer-guy is at the check-out.

Re: Target's EasySweep – Simplifying Skimmer Detection

#9

How do these skimmers work with chip&pin? I understand how magstripe skimmers work, but my understanding is that chip&pin is an active challenge response protocol. I’d love to hear more.

> How do these skimmers work with chip&pin?

My understanding is: They don’t. If you stick to contactless payments, you’re not at risk.

Re: Target's EasySweep – Simplifying Skimmer Detection

#10
post #4

it allows any Target team member to easily sweep a store for skimmers I'm unclear on how this is supposed to help - unless the skimmers are being installed by frickin ninjas it seems like they already needed insider cooperation.

It’s the former more or less - https://youtu.be/Sljmr8m88P8. They could do it on a lane that isn’t open (read no attention) just before a rush hour and hope it gets chosen.
Post reply on HN