Quote:
Originally Posted by Baddad
Oh Yes,
The smart card details can be scanned and copied while the card is "safely" in a purse, wallet or pocket.
Technology, and know how reveals the PIN.
Bad Bad Bad
Cheers
|
Hi Marty,
I am afraid it is even simpler that. No Mission Impossible scanning technology required.
All that is required is the credit card number and expiry date.
And a good memory or ideally a pen and paper to copy them down.
Given the cards are only valid for a few years at a time and given there are only
twelve months in a year, if you are willing to try up to about 36 month/year
combinations, the credit card number will suffice.
As you are aware, when you purchase over the telephone or online, no
physical presentation of your card is required. In most instances, not even
the CVV. Not even the name on the card is required either.
Now even if you were to never show your credit card to anyone, it could still
be debited without your knowledge. The algorithm for generating valid
credit card numbers is widely published and all that is then left is the challenge of
finding the month and year it expires by trial and error.
For credit cards to have any chance of having better security, they would require
something analogous to their own miniature display and keypad.
You would enter your own PIN into the card's own keypad, which you would never
reveal to a third party, and the card would display a PIN-of-the-moment for a few
seconds which you would then enter into the merchant's terminal.
Similar to the dongles used by online banking. Alternatively a smartphone
could be employed to do something similar.
Best Regards
Gary