News for hackers. Stuff that matters.
Re:Square responds to Verifone's allegations by brown9-2 on Thursday March 10, 2011 @08:44AM (#2309065)
And more so because its much easier to write rouge apps or malware-apps for smartphones than to hack the dedicated card readers

When I hand over my card to a merchant in a store, how do I know what they are swiping it in is a dedicated and secure card reader? I don't.

Re:Square responds to Verifone's allegations by blibble on Thursday March 10, 2011 @10:07AM (#2309327)
In the UK the merchant is not permitted to touch the customers card; all the card readers face the customer and are used by the customer (restaurants all have mobile PIN entry devices).

Now each credit card in the UK is has a chip (which uses end-to-end crypto), they're looking to phase out magstripes completely.

Currently if the merchant has to fallback to using the magstripe then he'll have considerably less protection against customer fraud, and he'll pay a much higher transaction fee.

Square would not be permitted to operate in the UK.

Re:Square responds to Verifone's allegations by nmcfarl on Thursday March 10, 2011 @10:33AM (#2309423)
Square would not be permitted to operate in the UK.

However neither would would the other 99% of the credit card in the US. The US infrastructure is insecure, and Square is no worse than the rest of it.

Re:Square responds to Verifone's allegations by larrywright on Thursday March 10, 2011 @09:50AM (#2309255)
A few years ago there was someone at a kiosk in a mall in NYC (I think), who got busted skimming. She was double-swiping, once through their POS system, and then a second time on a Palm Pilot with a magnetic stripe reader attached. She got busted because someone saw her doing it and got suspicious. Now, think about the number of times you hand over your card and it leaves your line of sight to be swiped. Other than retail stores, it happens to me all the time.