Free Republic
Browse · Search
News/Activism
Topics · Post Article

To: SkyPilot

Sub-dermal chips. Now, that would be absolutely secure, eh?


5 posted on 02/03/2014 1:33:35 PM PST by lurk
[ Post Reply | Private Reply | To 1 | View Replies ]


To: lurk

In other news there has been a rash of criminal activity resulting in people being kidnapped, forced to give up their pin# then having their hands chopped off and used to drain ATMs of the cash in their account.


14 posted on 02/03/2014 2:03:58 PM PST by Rebelbase (Tagline: optional, printed after your name on post)
[ Post Reply | Private Reply | To 5 | View Replies ]

To: lurk; SkyPilot; Vigilanteman; dalereed; familyop; morphing libertarian; All
Now, that would be absolutely secure, eh?

The chip-and-pin system is, certainly, an advancement over magnetic strip cards (which are easier to "skim") but in the case of Target and Neiman Marcus and other retailers, the breach of security had nothing to do with physical cards' security features.

People who understand little about card-payment technology simply use this incident to again glom onto the usual "Others (Europeans?) do it better" and old and tired "American banks and credit card companies just don't want to spend money on security because it's cheaper for them to absorb the costs of fraud" laments.

Actually, the magnetic strip cards hold minimal amount of information, so while it's easier to manufacture a forged one, it's also easier to cancel and replace without criminals getting too much of your personal info.

The problem with this particular security breach is that it happened on the back-end of payment processing, using an old (at least, since before 2007) vulnerability that likely has not been patched up by certain payment processors, despite warnings from Visa and security experts.

From What the Heck Is a RAM Scraper? - Re/code, by Arik Hesseldahl, 2014 January 13

As can be seen, the US companies are not alone in being attacked by this method, because vulnerability has nothing to do with magnetic strips or other physical cards' properties.

Chip-and-pin wouldn't protect from this attack, it could only help making it more difficult to counterfeit the physical card, which is mostly a waste of time, anyway - much less important than the identity info on the payment processors' servers.

30 posted on 02/03/2014 11:38:17 PM PST by CutePuppy (If you don't ask the right questions you may not get the right answers)
[ Post Reply | Private Reply | To 5 | View Replies ]

Free Republic
Browse · Search
News/Activism
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson