― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 14:12 (twenty years ago)
― Old School (sexyDancer), Thursday, 6 October 2005 14:13 (twenty years ago)
― nathalie, a bum like you (stevie nixed), Thursday, 6 October 2005 14:14 (twenty years ago)
― Colonel Poo (Colonel Poo), Thursday, 6 October 2005 14:16 (twenty years ago)
This is why we need to go to a chipcard system where the physical card issues a one time transaction id that cannot be used.
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 14:17 (twenty years ago)
― strng hlkngtn: what does it mean? (dubplatestyle), Thursday, 6 October 2005 14:19 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 14:19 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 14:20 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 14:21 (twenty years ago)
SF has these STREET ATMs, too. Like, not attached to a bank or any kind of business, just sat out on the street! I had to use one that was on a big crack block in the Tenderloin when I had no money for drinks at a show, otherwise NEVER NEVER NEVER.
― 400% Nice (nordicskilla), Thursday, 6 October 2005 14:21 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 14:22 (twenty years ago)
― Colonel Poo (Colonel Poo), Thursday, 6 October 2005 14:25 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 14:26 (twenty years ago)
― Super Cub (Debito), Thursday, 6 October 2005 14:28 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 14:37 (twenty years ago)
― Super Cub (Debito), Thursday, 6 October 2005 14:45 (twenty years ago)
― Laurel (Laurel), Thursday, 6 October 2005 14:54 (twenty years ago)
― nabisco (nabisco), Thursday, 6 October 2005 14:56 (twenty years ago)
― nabisco (nabisco), Thursday, 6 October 2005 14:57 (twenty years ago)
― Laurel (Laurel), Thursday, 6 October 2005 15:01 (twenty years ago)
― David R. (popshots75`), Thursday, 6 October 2005 15:15 (twenty years ago)
So yeah Ive started covering the PIN typing with my other hand too.
― Trayce (trayce), Thursday, 6 October 2005 15:18 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 15:24 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 15:26 (twenty years ago)
― when something smacks of something (dave225.3), Thursday, 6 October 2005 16:04 (twenty years ago)
― when something smacks of something (dave225.3), Thursday, 6 October 2005 16:05 (twenty years ago)
― phil-two (phil-two), Thursday, 6 October 2005 16:19 (twenty years ago)
Snopes on the typical scam:http://www.snopes.com/crime/warnings/atmcamera.asp
And bankrate.com on "skimmers:"http://www.bankrate.com/brm/news/atm/20021004a.asp
ATM keypads can't be recorded "electronically" so covering with yr other hand is actually extremely effective at preventing fraud on yr money. Modern CCTV cams can pick up your PIN entry from behind mirrored glass on the other side of the street.
http://www.securityfocus.com/news/9161 = fun to read about VISA keypad sec
Be very glad you don't live in the UK or Italy, though. Scroll down through here:http://www.cl.cam.ac.uk/users/rja14/wcf.htmlCRAAAAAZY!
― TOMBOT, Thursday, 6 October 2005 16:34 (twenty years ago)
― Laurel (Laurel), Thursday, 6 October 2005 16:38 (twenty years ago)
A teenage girl in Ashton under Lyme was convicted in 1985 of stealing £40 from her father. She pleaded guilty on the advice of her lawyers that she had no defence, and then disappeared; it later turned out that there had been never been a theft, but merely a clerical error by the bank
WHAT A DICKHEAD FATHER
― kyle (akmonday), Thursday, 6 October 2005 16:42 (twenty years ago)
xpost It's not impossible, but read the securityfocus article. If you want I can go find the Common Criteria Protection Profile that has the exact functional spec for the PED security requirements. Institutions be loving painfully detailed documentation.
― TOMBOT, Thursday, 6 October 2005 16:45 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 17:12 (twenty years ago)
― phil-two (phil-two), Thursday, 6 October 2005 17:21 (twenty years ago)
― Alba (Alba), Thursday, 6 October 2005 17:29 (twenty years ago)
― rasheed wallace (rasheed wallace), Thursday, 6 October 2005 17:35 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 17:37 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 17:39 (twenty years ago)
Maybe instead of account numbers, randomized PINs that are transmitted to the consumer via some sort of SecurID-type system would be more viable?
― rasheed wallace (rasheed wallace), Thursday, 6 October 2005 17:41 (twenty years ago)
You could prevent check fraud with a preprinted digitally signed unique watermark on each check I suppose... Maybe an rfid tag that you use against a cryptocheckcard that returns back a number that you handwrite on a check to "sign" it (in addition to the usual MP)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 17:46 (twenty years ago)
i thought this was going to be about superfluous $1.75 "fees" for cash withdrawal at bodegas draining your bank account; i know they do mine. i went to a bachelor party last weekend and the strip club wanted to charge us $15 to use their ATM.
― Tracer Hand (tracerhand), Thursday, 6 October 2005 17:48 (twenty years ago)
http://img.photobucket.com/albums/v134/tracerhand/atm.jpg
― Tracer Hand (tracerhand), Thursday, 6 October 2005 17:52 (twenty years ago)
― Tracer Hand (tracerhand), Thursday, 6 October 2005 18:01 (twenty years ago)
― Alba (Alba), Thursday, 6 October 2005 18:03 (twenty years ago)
― n/a (Nick A.), Thursday, 6 October 2005 18:03 (twenty years ago)
― 400% Nice (nordicskilla), Thursday, 6 October 2005 18:07 (twenty years ago)
― anthony, Thursday, 6 October 2005 18:07 (twenty years ago)
We slandered BODEGAS
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 18:12 (twenty years ago)
― Tracer Hand (tracerhand), Thursday, 6 October 2005 18:15 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 19:02 (twenty years ago)
lol
― lol, Thursday, 6 October 2005 19:04 (twenty years ago)
― Jonothong Williamsmang (ex machina), Thursday, 6 October 2005 19:05 (twenty years ago)
― Allyzay knows a little German (allyzay), Thursday, 6 October 2005 19:05 (twenty years ago)
― hstencil (hstencil), Thursday, 6 October 2005 19:06 (twenty years ago)
― lol, Thursday, 6 October 2005 19:07 (twenty years ago)
― lol, Thursday, 6 October 2005 19:42 (twenty years ago)
― Jonothong Williamsmang (ex machina), Friday, 7 October 2005 12:55 (twenty years ago)
― Pete (Pete), Friday, 7 October 2005 13:01 (twenty years ago)
The other problem is the the ICs in smartcards are super crap at key generation. You basically have to code the whole mess into the card when you issue it and if anything happens to compromise the key pair then you have to take the card out of service and replace it.
That there would be why the only places you see trying to implement enterprise smartcard infrastructure are huge government agencies. Somebody's got to keep those companies in business. Something you have, something you know: the model isn't any different from traditional 2-factor authentication anyway (except for my laundry situation = 1-factor "e-cash" bullshit!) and the whole "biometric smart card" idea turns to snake oil in implementation.
― TOMBOT, Friday, 7 October 2005 13:11 (twenty years ago)
― koogs (koogs), Friday, 7 October 2005 13:17 (twenty years ago)
― Jonothong Williamsmang (ex machina), Friday, 7 October 2005 13:21 (twenty years ago)
― TOMBOT, Friday, 7 October 2005 13:29 (twenty years ago)
― RJG (RJG), Friday, 7 October 2005 13:32 (twenty years ago)
― Jonothong Williamsmang (ex machina), Friday, 7 October 2005 13:33 (twenty years ago)
* Meaning of the mystery dollar disappearance variety, not the "fucker stole my credit card" variety.
― Allyzay knows a little German (allyzay), Friday, 7 October 2005 13:33 (twenty years ago)
No, it just resembles George's wallet on Seinfeld, so everything in it breaks or falls out unnoticed!
― Allyzay knows a little German (allyzay), Friday, 7 October 2005 13:34 (twenty years ago)
Ally, do you have a reference for that? It seems to me that most ATM fraud would come from stolen card + pins!
― Jonothong Williamsmang (ex machina), Friday, 7 October 2005 13:35 (twenty years ago)
Stolen card is #1 obv, I mean there's barely any such thing as a pure ATM card anymore so you don't even need people's PIN# to steal shit out of their account. Incl money, just go to a grocery, buy a carton of smokes and ask for $100 back.
― Allyzay knows a little German (allyzay), Friday, 7 October 2005 13:56 (twenty years ago)
― Allyzay knows a little German (allyzay), Friday, 7 October 2005 13:57 (twenty years ago)
― Jonothong Williamsmang (ex machina), Friday, 7 October 2005 13:57 (twenty years ago)
― Allyzay knows a little German (allyzay), Friday, 7 October 2005 13:59 (twenty years ago)
― hstencil (hstencil), Friday, 7 October 2005 13:59 (twenty years ago)
btw, (at least here) a lot of generic atms that will charge you that extra fee that your home bank wouldn't, are actually anonymously owned by the bigger banks - so they're kind of double charging their own customers all sneaky like.
― Kim (Kim), Friday, 7 October 2005 14:26 (twenty years ago)
― Tracer Hand (tracerhand), Monday, 10 October 2005 19:51 (twenty years ago)
I had my bank account fleeced of my entire weekend drinking money life savings (about £200) when I was down in London a few years back. It was proved by science (OK, those wee cameras inside the ATMS) that it wasn't me using the machine after the last transaction I told them I'd made and I still had to pay a £50 excess. Bastarding Clyd3sd4le B4nk.
― ailsa (ailsa), Monday, 10 October 2005 20:13 (twenty years ago)
― Tracer Hand (tracerhand), Monday, 10 October 2005 20:14 (twenty years ago)
― ailsa (ailsa), Monday, 10 October 2005 20:21 (twenty years ago)
― Colonel Poo (Colonel Poo), Tuesday, 11 October 2005 08:23 (twenty years ago)
― ailsa (ailsa), Tuesday, 11 October 2005 15:50 (twenty years ago)
sigh
2008-12-10 - ABM Withdrawal $160.002008-12-10 - ABM Deposit - $1,000.002008-12-10 - ABM Withdrawal $200.00
shitty thing is last few purchases made by me were all christmas gifts for kids! way to kick a girl when she's having a nice week, jerks..
― skeletal lexing (Finefinemusic), Thursday, 11 December 2008 03:46 (seventeen years ago)
though right now I am +$640 which is nice, I wish they'd let me keep it for emotional suffering
― skeletal lexing (Finefinemusic), Thursday, 11 December 2008 03:47 (seventeen years ago)
ooh, the fakey deposit, that's tricky. sucks :(
― ian, Thursday, 11 December 2008 08:20 (seventeen years ago)
Got a weird look from someone when I pulled on the ATM card slot on a gas pump to see if there was a skimmer in there. Explained what I was doing and got an even weirder look.
Have you seen how optimized these things are? http://krebsonsecurity.com/2012/04/skimtacular-all-in-one-atm-skimmer/
― Vini Reilly Invasion (Elvis Telecom), Wednesday, 9 May 2012 01:35 (thirteen years ago)
Friend of mine got done just the other day. Her whole account cleaned out completely. The worst part of it is, the bank will sort you out but they dont do so right away, it can take days or weeks. Too bad if you have rent due!
― Pureed Moods (Trayce), Wednesday, 9 May 2012 02:21 (thirteen years ago)
I pull on those ATM slots all the time now since my card was skimmed a few years ago. I'm glad i did because twice so far I've had the skimmers pop right off in my hand.
― heated debate over derpy hooves (jon /via/ chi 2.0), Wednesday, 9 May 2012 02:39 (thirteen years ago)
no shit
― goole, Wednesday, 9 May 2012 02:46 (thirteen years ago)
what the fuck, more things to worry about
― sleeve, Wednesday, 9 May 2012 03:08 (thirteen years ago)
Never occurred to me to pull on the slot, but I do cover my hand and stuff. I also try my best nevr to use EFTPOS in taxis, as there's very little oversight going on with those guys in our city right now, and portable ATMs are even more fuck-withable than bank ones are.
― Pureed Moods (Trayce), Wednesday, 9 May 2012 03:19 (thirteen years ago)
Jon: what'd you do when you found the skiummer? take it into the branch? I'd be shittin' myself that they thought I'd been messing with the machine!
― Pureed Moods (Trayce), Wednesday, 9 May 2012 03:20 (thirteen years ago)
just got off the phone with My Bank, cuz this may have happened at a My Bank ATM.
(I almost always use My Bank ATMs on principle, fuck fees, but apparently I need to work with tellers from now on.)
― saltwater incursion (Dr Morbius), Monday, 12 November 2012 23:37 (thirteen years ago)
so many delightful new experiences this year
― saltwater incursion (Dr Morbius), Monday, 12 November 2012 23:42 (thirteen years ago)
Shit. how much?
― the little prince of inane false binary hype (Alfred, Lord Sotosyn), Monday, 12 November 2012 23:43 (thirteen years ago)
thats kinna personal
not quite a third of what I recently inherited? (A month ago there wouldn't have been anything worth hacking)
― saltwater incursion (Dr Morbius), Monday, 12 November 2012 23:46 (thirteen years ago)
Well, no, I wasn't looking for figures, just trying to understand how much it would hurt.
― the little prince of inane false binary hype (Alfred, Lord Sotosyn), Monday, 12 November 2012 23:48 (thirteen years ago)
I assume I'm getting credited for it, or I'm going Full Falling Down.
― saltwater incursion (Dr Morbius), Tuesday, 13 November 2012 00:06 (thirteen years ago)
Another one: http://krebsonsecurity.com/2013/07/dont-get-sucker-pumped/
http://krebsonsecurity.com/wp-content/uploads/2013/07/gaspumpPADoverlay-600x192.png
― Elvis Telecom, Monday, 5 August 2013 08:48 (twelve years ago)
Gas pump skimmers are getting craftier. A new scam out of Oklahoma that netted thieves $400,000 before they were caught is a reminder of why it’s usually best to pay with credit versus debit cards when filling up the tank.The U.S. Attorney’s office in Muskogee, Okla. says two men indicted this month for skimming would rent a vehicle, check into a local hotel and place skimming devices on gas pumps at Murphy’s filling stations located in the parking lots of Wal-Mart retail stores. The fraud devices included a card skimmer and a fake PIN pad overlay designed to capture PINs from customers who paid at the pump with a debit card.According to their indictment (PDF), defedants Kevin Konstantinov and Elvin Alisuretove would leave the skimming devices in place for between one and two months. Then they’d collect the skimmers and use the stolen data to create counterfeit cards, visiting multiple ATMs throughout the region and withdrawing large amounts of cash. Investigators say some of the card data stolen in the scheme showed up in fraudulent transactions in Eastern Europe and Russia.As the Oklahoma case shows, gas pump skimmers have moved from analog, clunky things to the level of workmanship and attention to detail that is normally only seen in ATM skimmers. Investigators in Oklahoma told a local news station that the skimmer technology used in this case was way more sophisticated than anything they’ve seen previously.Increasingly, pump skimmer scammers are turning to bluetooth-enabled devices that connect directly to the pump’s power source. These skimmers can run indefinitely, and allow thieves to retrieve stolen card data wirelessly while waiting in their car at the pump.
The U.S. Attorney’s office in Muskogee, Okla. says two men indicted this month for skimming would rent a vehicle, check into a local hotel and place skimming devices on gas pumps at Murphy’s filling stations located in the parking lots of Wal-Mart retail stores. The fraud devices included a card skimmer and a fake PIN pad overlay designed to capture PINs from customers who paid at the pump with a debit card.
According to their indictment (PDF), defedants Kevin Konstantinov and Elvin Alisuretove would leave the skimming devices in place for between one and two months. Then they’d collect the skimmers and use the stolen data to create counterfeit cards, visiting multiple ATMs throughout the region and withdrawing large amounts of cash. Investigators say some of the card data stolen in the scheme showed up in fraudulent transactions in Eastern Europe and Russia.
As the Oklahoma case shows, gas pump skimmers have moved from analog, clunky things to the level of workmanship and attention to detail that is normally only seen in ATM skimmers. Investigators in Oklahoma told a local news station that the skimmer technology used in this case was way more sophisticated than anything they’ve seen previously.
Increasingly, pump skimmer scammers are turning to bluetooth-enabled devices that connect directly to the pump’s power source. These skimmers can run indefinitely, and allow thieves to retrieve stolen card data wirelessly while waiting in their car at the pump.
― Elvis Telecom, Monday, 5 August 2013 08:49 (twelve years ago)
A lot of people where I work had their credit/debit card info stolen. At last count I heard it was 200 people.
― tokyo rosemary, Monday, 5 August 2013 13:15 (twelve years ago)