News for hackers. Stuff that matters.

A comment on Can’t Hack a Hacker: Reverse Engineering a Discovered ATM Skimmer. Parent comment

Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by chiph on Monday May 02, 2016 @08:59AM (#11610935)
I just returned from Belgium. I made sure that all the cards I took had chips. Results were mixed: The train station kiosks recognized the cards as chip + signature even though I had a PIN for them, so I had to use the clerk to buy tickets. The payment terminals in restaurants asked for my PIN, but then rejected it. I suspect my bank (despite assurances) didn't enable it. I have no way to test my cards now that I'm back in the US, as the readers (for the stores that have them enabled) default to signature "verification". The whole situation is a mess.
[ Parent | on HN ]
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by radnor on Monday May 02, 2016 @09:48AM (#11611261)
It's been a while, but the last time I researched credit cards for chip+pin the US didn't have any readily available - they're all chip+signature. Even though you have a PIN I can guarantee that it's only good for cash-withdrawal transactions (e.g. as a debit card or a high APR cash advance).
[ Parent | on HN ]
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by chiph on Monday May 02, 2016 @10:39AM (#11611705)
This was USAA, which has a lot of members living overseas, so the assumption was that they're familiar with the requirements.
[ Parent | on HN ]
Re:Can’t Hack a Hacker: Reverse Engineering a Discovered ATM... by kbart on Tuesday May 03, 2016 @01:12AM (#11618083)
Authentication methods is an agreement between card and POS terminal with card having the final word. So yes, blame your bank for not configuring card parameters correctly.
[ Parent | on HN ]