I am fuzzy on the protocols involved in credit card and debit transactions. I know with bitcoin and all other crypto a payment doesn't release any information that can be used to authorize a different transaction. Because cryptography can do that. In theory any payment system could also utilize cryptography even if it isn't cryptocurrency and I believe the tap does. But maybe not. I'd think the tap would basically be an extension of using the chip but with an air gap. And I'd think the chip would be doing all the expected cryptography to actually secure things. But apparently not or these skimmers wouldn't exist for anything besides the magnet reader.
It's sad that these payment processors still corner the market while not implementing secure systems. Cryptography isn't that hard. 99% of the time if you are doing something that's not in a text book you are doing something wrong. And the textbooks document pretty much everything you'd want to do and how to do them. Companies that handle payments should hire people who have read those textbooks before deciding how to do things.
This is why standards are often bad. If a standard prevents people from doing things that are better, not only should we ignore the standard, but we should do violent things to anyone who continues the standard.
Log in
Stores that have these should be investigated. I've seen no information on what happens after these devices are discovered.
I also wonder if there are similar devices for touchless transactions. It should be easy to arrange, but I've seen no info.
I am fuzzy on the protocols involved in credit card and debit transactions. I know with bitcoin and all other crypto a payment doesn't release any information that can be used to authorize a different transaction. Because cryptography can do that. In theory any payment system could also utilize cryptography even if it isn't cryptocurrency and I believe the tap does. But maybe not. I'd think the tap would basically be an extension of using the chip but with an air gap. And I'd think the chip would be doing all the expected cryptography to actually secure things. But apparently not or these skimmers wouldn't exist for anything besides the magnet reader.
It's sad that these payment processors still corner the market while not implementing secure systems. Cryptography isn't that hard. 99% of the time if you are doing something that's not in a text book you are doing something wrong. And the textbooks document pretty much everything you'd want to do and how to do them. Companies that handle payments should hire people who have read those textbooks before deciding how to do things.
This is why standards are often bad. If a standard prevents people from doing things that are better, not only should we ignore the standard, but we should do violent things to anyone who continues the standard.
Deploy insecure payments? Stab.
Thanks for the advice.
Nothing but a blank screen for me.