Hacker News new | past | comments | ask | show | jobs | submit login

Looking for people actually doing this, and I stumbled up this interesting article:

https://samy.pl/magspoof/

It's crazy, if your electro magnet is strong enough, you don't even need a tin foil wrapped credit card to put in the machine!




Wow. Reading the bit about disabling the chip security makes me wonder what the point of a chip card is in the first place? All it takes is lifting the mag strip and altering it to declare that there’s no chip.


While you can get a chip-enabled card reader to accept a magstripe-only transaction by altering the magstripe, the final authorisation decision is with the card issuer.

And the card schemes are mandating the issuers to keep track whether a card was issued with a chip and then reject authorisation attempts with a magstripe that claims "no chip" available.

That being said, in reality there are again and again still issuers who did not implement this and similar security measures [1].

[1] https://krebsonsecurity.com/2020/07/is-your-chip-card-secure...




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: