News for hackers. Stuff that matters.
Re:The Colonial Pipeline Was Fine, Shutdown to Make Sure Its... by alibarber on Tuesday May 18, 2021 @04:30AM (#27192378)
But a credit card still keeps track of how much you spend - it doesn't rely on you honestly reporting how much you spent over the month...
Re:The Colonial Pipeline Was Fine, Shutdown to Make Sure Its... by neltnerb on Tuesday May 18, 2021 @04:46AM (#27192477)
Oh, I think they are talking about the earlier period where you just did a carbon copy of the card, got it signed, and if the card was a fake there was certainly no way to tell at the time. It would be the equivalent of a bad check, talking the days before swipe machines.
Re:The Colonial Pipeline Was Fine, Shutdown to Make Sure Its... by alibarber on Tuesday May 18, 2021 @05:40AM (#27192759)
I guess, but discounting active fraud, there is still a paper trail of how much you spent; The bank will still have said "We think you owe us $100, here is our reasoning based on things you signed" never "you spent some amount of money we're not sure of - please give it to us" or "all of our customers spent $1million, so let us have your share, whatever you think that may be" as would be the case here.

Yes, the system would fall apart if you disputed every single transaction and made them supply irrefutable evidence you did in fact authorise the transaction - but it doesn't revolve entirely on the trust that people will keep their own account of what they think they spent.

Re:The Colonial Pipeline Was Fine, Shutdown to Make Sure Its... by neltnerb on Tuesday May 18, 2021 @03:38PM (#27199940)
Sure, but the store that accepted the invalid credit card has traditionally been on the hook. The store is the one being targeted even if the person whose credit card was stolen can get off with disputing the charge.

And before everything was networked, there was no way for a store to check with the credit card company that the card wasn't reported stolen. That's the trusting people part, it's the store that is trusting people without the ability to even verify that the card hasn't been reported stolen.

Yes, there is a paper trail, but the situation I'm talking about is analogous to a bad check or a counterfeit bill -- there's no recourse if the bad actor can't be found and the store is on the hook.

Re:The Colonial Pipeline Was Fine, Shutdown to Make Sure Its... by alibarber on Tuesday May 18, 2021 @04:27PM (#27200564)
Ah I understand now - from the shop’s point of view yes there is risk in this.

I am just about old enough to remember this time - it’s funny to think that security hinged on checking if the signature looked ‘right’. For cheques I remember here at least for yours to actually be accepted anywhere you needed a ‘cheque guarantee card’ which was basically just a debit card but with a fancy hologram - so a certificate of your ‘goodness’ - up to a certain limit per cheque. The shop would copy the details and this would supposedly guarantee they’ll be paid.

I was going to say that shops could have asked for ID - but at this time driving licences didn’t have a picture and weren’t cards - so no one carried them anyway. There was probably a lot of ‘subjective’ acceptance around the place (‘does this person look trustworthy, would they really be given a credit card or did they steal it?’) come to think of it…

Re:The Colonial Pipeline Was Fine, Shutdown to Make Sure Its... by neltnerb on Wednesday May 19, 2021 @05:11AM (#27206202)
Yes, I didn't want it to veer off topic, but I think it is extremely obvious that such standards involved implicit or explicit biases, as well as real recognition of individual customers' actual past behavior (like if a gas station has taken advantage of them in the past).
Re:The Colonial Pipeline Was Fine, Shutdown to Make Sure Its... by StavrosK on Tuesday May 18, 2021 @06:04AM (#27192885)
I assume the companies then just passed the risk onto the consumer (or ate it to grow their user base), I find it hard to believe they just continued operating on the honor system.