Malicious PyPI packages stealing credit cards and injecting code

Re:Malicious PyPI packages stealing credit cards and injecti... by DannyBee on Tuesday August 03, 2021 @09:13AM (#28048727)

In the US, CC has, by law, almost no liability for fraud - it's capped at 50 bucks, and is 0 bucks if you report it before it gets used. They are also easily replaced, so i think many wouldn't go as far as you are.

Debit cards are weirder in their liability (and are extracting money from your bank account, which is harder to get back).

If you report them lost/stolen before someone uses them, it's 0 bucks Within 2 days of learning about it, it's 50 bucks. More than 2 days, but less than 60, 500 bucks. More than 60 days - unlimited liability.

So i'd be a lot more careful with debit cards, at least in the US.

(You are never liable on either for unauthorized transactions when your card is not lost/stolen as long as you report them within 60 days)

[ Parent | on HN ]

Re:Malicious PyPI packages stealing credit cards and injecti... by r3trohack3r on Tuesday August 03, 2021 @09:42AM (#28049031)

Hmm. I understood this to be different, but realizing now I don’t have sources for where I learned this:

* Bank accounts, savings accounts, brokerage accounts, etc. are all unlimited liability

* Lines of credit are all zero liability

I’ve used this as a rule of thumb for many years, and was the initial reason for me switching to 100% credit cards for transactions.

[ Parent | on HN ]

Re:Malicious PyPI packages stealing credit cards and injecti... by DannyBee on Tuesday August 03, 2021 @11:24AM (#28050284)

Yeah, i'm telling you based on what the statutes say (the FCBA covers credit cards, the EFTA covers debit)

A short version of it is here: https://www.consumer.ftc.gov/articles/0213-lost-or-stolen-cr...

[ Parent | on HN ]

Re:Malicious PyPI packages stealing credit cards and injecti... by brianwawok on Tuesday August 03, 2021 @09:42AM (#28049045)

I would never ever use a debit card outside of the ATM of the bank I belong to.

Credit card? Go wild, use it everywhere.

[ Parent | on HN ]