Yet another Credit Card Exploit

[about_average]

With just the first 6 digits of your CC number criminals can get the rest of the number, the expiry date and ccv number within 6 seconds and make online purchases.

https://www.independent.co.uk/news/...-card-details-fraud-six-seconds-a7450776.html

 

[about_average]

Here's a link to the research paper.

http://eprint.ncl.ac.uk/file_store/production/230123/19180242-D02E-47AC-BDB3-73C22D6E1FDB.pdf

 

[Liar]

So can a pickpocket with a cell phone. Or your waiter.

It ain't ever been safe.

Which is why all my cards are locked to two step verification

 

[JohnnySavage]

So can a pickpocket with a cell phone. Or your waiter.

It ain't ever been safe.

Which is why all my cards are locked to two step verification

Yea, but you can't even buy gas in the US

 

[about_average]

So can a pickpocket with a cell phone. Or your waiter.

For the pickpocket, not if it's in a sleeve that blocks RFID signals.
For the waiter, true.

It ain't ever been safe.

Which is why all my cards are locked to two step verification

That wouldn't help if the 2FA is a PIN.
It likely wouldn't even help if the 2FA is a code sent to you by SMS. though at least, hopefully, most people would ask why their bank is randomly sending them a CC authentication code.

 

[Liar]

For the pickpocket, not if it's in a sleeve that blocks RFID signals.

Pickpockets pick pockets. It's in the name. I'm saure they can figure out how to remove the card from the sleeve once they have it.

 

[Liar]

Yea, but you can't even buy gas in the US

I learnt to do it with cash. It's still ass-backwards, but I manage.

 

[about_average]

Pickpockets pick pockets. It's in the name. I'm saure they can figure out how to remove the card from the sleeve once they have it.

Ah, I misunderstood what you were saying when you said "a pickpocket with a cell phone.
I thought you meant reading the RFID contents with a cell phone".

 

[Liar]

Ah, I misunderstood what you were saying when you said "a pickpocket with a cell phone.
I thought you meant reading the RFID contents with a cell phone".

Nah, just borrow the card for five seconds, snap a pic of the front and the back, and you have all the info you need unless it's got a verification tier.