News for hackers. Stuff that matters.
Re:Apple’s Anti-Tracking Plans for iPhone by lotsofpulp on Tuesday December 15, 2020 @06:47AM (#25429381)
I wonder if it would be profitable for Visa/Mastercard/Discover/AmEx to sell a verification service where people can authenticate with a $0.01 authorization or approval amount. Obviously, it wouldn't work with gift cards or other accounts not tied to a real person.
Re:Apple’s Anti-Tracking Plans for iPhone by ratherbefuddled on Tuesday December 15, 2020 @08:06AM (#25429884)
The answer to card fraud is called Strong Customer Authentication and it's a requirement under PSD2. It requires payment service providers to obtain a second factor for authentication. This might be an online banking login and approval, device data capture or an SMS one time code. How is up to the card provider.
Re:Apple’s Anti-Tracking Plans for iPhone by lotsofpulp on Tuesday December 15, 2020 @08:13AM (#25429950)
I'm not referring to verification for card fraud, I'm saying the card networks could sell it to anyone that wants to verify a human is on the other end. Like an alternative to Captcha.
Re:Apple’s Anti-Tracking Plans for iPhone by ratherbefuddled on Tuesday December 15, 2020 @08:24AM (#25430046)
Strong Customer Authentication should be sufficient to prove that the payment request is authorised by the card holder, given this I'm not sure why a business would pay to be sure there's a human there?
Re:Apple’s Anti-Tracking Plans for iPhone by lotsofpulp on Tuesday December 15, 2020 @09:08AM (#25430396)
I’m not referring to payments at all. I’m talking about using the card networks to serve as an alternative to Captcha for things like forums or any other situation besieged by bots and whatnot.
Re:Apple’s Anti-Tracking Plans for iPhone by rattray on Tuesday December 15, 2020 @07:02AM (#25429475)
And make stolen credit card numbers even more valuable?

(I like where your head is at, fraud is just hard)

Re:Apple’s Anti-Tracking Plans for iPhone by sudhirj on Tuesday December 15, 2020 @07:28AM (#25429638)
Stolen cards have long since been solved in many parts of the world with 3DS. Not sure why the US is still lagging behind on this.
Re:Apple’s Anti-Tracking Plans for iPhone by trishmapow2 on Tuesday December 15, 2020 @07:34AM (#25429681)
3D Secure for those like me who didn't know the proper term, referring to an extra verification step from your bank e.g. SMS.

https://en.wikipedia.org/wiki/3-D_Secure

https://stripe.com/docs/payments/3d-secure

Re:Apple’s Anti-Tracking Plans for iPhone by hanche on Tuesday December 15, 2020 @10:38AM (#25431215)
For some value of “solved”, yes. I live in 3DS-land myself, but since 3DS is not universal, credit card info is still at risk. I had a fraudulent purchase against my card recently. The bank returned the money, but at the moment, I am fighting a bill for import duty on the Gucci scarf the crook purchased on my card. :-/ I had no idea, until now, that they may charge €350 for a scarf.
Re:Apple’s Anti-Tracking Plans for iPhone by lotsofpulp on Tuesday December 15, 2020 @07:29AM (#25429648)
Combine it with 2FA, such as TOTP or SMS.