News for hackers. Stuff that matters.
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by dmd on Monday May 02, 2016 @06:54AM (#11610440)
I'm in Boston, and have yet to encounter a single reader that takes chips. They have started having the slot lately, but it's always taped over or there's a sign telling you not to use it. Or if you try to use it, the cashier gives you a weird look and has no idea what you're doing and tells you to swipe.
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by james-skemp on Monday May 02, 2016 @07:38AM (#11610588)
Madison WI. Gas stations (at the pump) and grocery stores are the only places I go to that don't have or use the chips (taped over). I understand both have extra time to rollout.

I assumed it had rolled out across most of the US at this point since most of the smaller places had even implemented it.

Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by jrjarrett on Monday May 02, 2016 @08:41AM (#11610844)
I'm in Madison, too, and there are still a lot of places that don't use the chips. I was at Farm & Fleet yesterday, had to swipe, for example.
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by surge on Monday May 02, 2016 @10:41AM (#11611728)
I've been told that card processors will get charged more going forward if they don't implement the chips, or for non-chip transactions because of the added risk involved. That should help speed up the transition or at least activate it on those readers that have it.
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by throwaway7767 on Monday May 02, 2016 @12:25PM (#11612834)
> I've been told that card processors will get charged more going forward if they don't implement the chips, or for non-chip transactions because of the added risk involved.

This is true. It's also weird, since really they should be charging less for chip-and-pin, not more for magstripes. By moving to chip-and-pin they immediately release themselves from the hook for card theft, moving the liability to the card holder. The high transaction costs in card networks have historically been defended as largely stemming from fraud costs. Yet, we're expected to pay the same fees.

It's a good time to be in the card processing business.

Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by SmirkingRevenge on Monday May 02, 2016 @12:23PM (#11612823)
Where I live (NC) almost nobody has chips enabled, even big chains, the one exception being Target.
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by nickpsecurity on Tuesday May 03, 2016 @12:06AM (#11617841)
Nice, underhanded humor. The joke being on them was even better given they were the retail company famous for having best security. :)
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by bbarn on Monday May 02, 2016 @08:39AM (#11610833)
I've actually noticed many of the pay at the pump not working with my chip card at all lately and having to go inside or use my other card that doesn't have a chip yet.
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by teeray on Monday May 02, 2016 @10:21AM (#11611569)
The worst part about that is it's going to start forming consumer habits. Everyone will trust the taped over sign as being from the merchant, when it could just as easily have been installed by a skimmer. Furthermore, if people get into the habit of swiping first, then using the chip when the terminal asks them to, that still leaves an opportunity to skim.

EDIT: Grammar

Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by 0xffff2 on Monday May 02, 2016 @03:16PM (#11614590)
A fraudster taping over the chip slot would be detected after a single skim though, since the terminal won't accept a swipe from a chip enabled card if it's set to process chip payments.
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by vermontdevil on Monday May 02, 2016 @07:28AM (#11610540)
I'm in Indianapolis area. The chip reader requirement is spreading everywhere I go. Target, Lowes, Kroger etc. it's getting to the point now that I use the chip more than swipe per week
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by julian_t on Monday May 02, 2016 @10:55AM (#11611830)
Here in NY, chips are becoming more common. But rather strangely, my local diner has gone back to swiping because "they got a new card machine"
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by cushychicken on Monday May 02, 2016 @07:56AM (#11610653)
Every CVS in the Boston area makes me use the chip now.

FWIW, it may be a bank requirement, not a vendor one.

Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by kbart on Monday May 02, 2016 @08:55AM (#11610915)
Recently, October 2015, the liability shift has happened from banks to merchants if they do not upgrade payment systems to chip-enabled devices. Some areas, notably gas stations, are exempted from this until few years later, that might explain why other commentators complained about them. Citing [1]:

"Beginning in October 2015, that liability will shift to the merchants in certain cases unless they have replaced or upgraded their card acceptance and processing systems to use chip-enabled devices and applications to process payment transactions."

1. http://www.emv-connection.com/understanding-the-2015-u-s-fra...

Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by cushychicken on Monday May 02, 2016 @02:20PM (#11613994)
Informative! Thanks for sharing.
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by hoov on Monday May 02, 2016 @07:34AM (#11610569)
Odd. I'm also in Boston and have to use it almost everywhere I go.