News for hackers. Stuff that matters.
Re:Malicious PyPI packages stealing credit cards and injecti... by prower on Tuesday August 03, 2021 @09:36AM (#28048979)
Some online banks (don't know how widespread this is) allow you to create "virtual card" that expire either after 1 purchase or at a specific date (and with a set maximum of budget). I use them for every single purchase I make online, it's inconvenient but at least i've never entered my real card info anywhere.
Re:Malicious PyPI packages stealing credit cards and injecti... by brianwawok on Tuesday August 03, 2021 @09:42AM (#28049030)
That sounds like a lot of work. At least in the US you are not responsible for fraud. (I think the law may have like a $50 liability thing, but Visa/MC waive). So it's better to just not do this, and every 3-4 years when my CC is stolen, call them up - dispute the charges, get a new number. Takes < 5 minutes and I keep going.

For what it's worth, the 2 times my number got stolen in the last 6 years, one was from a rogue agent at a hotel in Chicago, and one was from a bad website that stored credit cards.

Re:Malicious PyPI packages stealing credit cards and injecti... by trepatudo on Tuesday August 03, 2021 @02:54PM (#28052748)
In Portugal, you basically open the app, scan fingerprint to give permission and get a new card.

You can even scan the card via webcam or copy the details to clipboard.

The virtual card also limits itself either to single transaction or single store so it can't be used even if compromised on store level.

It's pretty simple process (<30sec) and it's really useful.

Re:Malicious PyPI packages stealing credit cards and injecti... by hggythhdtr on Tuesday August 03, 2021 @12:10PM (#28050939)
> That sounds like a lot of work.

My bank has a browser plugin that can create virtual cards with just a few clicks.

> dispute the charges, get a new number. Takes < 5 minutes and I keep going.

This isn't the case for me, it would take me quite a bit of time over a period of several weeks to update all of the places i use my card if I were using the same number everywhere and it was compromised. I handle a lot of billing. I've had cards compromised at least three times in the past and it's very unpleasant. (for me)

Re:Malicious PyPI packages stealing credit cards and injecti... by nIHOPp6MQw0f5ut on Tuesday August 03, 2021 @10:09AM (#28049372)
Privacy (dot) com offers that as a service and you can use their extension to generate a card without leaving the page.