Breach at Sonic Drive-In May Have Impacted Millions of Credit, Debit Cards

Re:Breach at Sonic Drive-In May Have Impacted Millions of Cr... by drzaiusapelord on Wednesday September 27, 2017 @04:38PM (#15352072)

So does using a chip reader. Assuming its up to current standards the card's information is cryptographically locked to Sonic's vendor ID and any stolen stored CC info could only be used at other Sonics.

Chip + Pin solves it even better by forcing the attacker to learn the pin for the card. We're not there yet in the US but once everyone has modern chip readers, adding pins will be trivial.

Also as a customer I'm not liable for these issues. The vendor is. With cryptocurrency, if there's a hack against me and my coins are gone, well, they're gone forever.

Sure beats giving up on cc's entirely for cryptocurrency, which comes with its own headaches and problems, especially Bitcoin which as a network wouldnt be able to cover 1 hour of credit transactions in the states.

[ Parent | on HN ]

Re:Breach at Sonic Drive-In May Have Impacted Millions of Cr... by peterwwillis on Wednesday September 27, 2017 @04:51PM (#15352209)

The US will not be getting PINs for cards. It would put liability on the bank rather than the merchant. And it only affects cloned card fraud, it doesn't affect online transactions. As far as banks are concerned, the chip itself provides enough protection, and they have no interest in helping reduce merchant losses.

[ Parent | on HN ]

Re:Breach at Sonic Drive-In May Have Impacted Millions of Cr... by amenghra on Wednesday September 27, 2017 @05:00PM (#15352297)

> cryptographically locked to Sonic's vendor ID and any stolen stored CC info could only be used at other Sonics.

That's not how chip cards work.

[ Parent | on HN ]