News for hackers. Stuff that matters.

A comment on Why are McDonald’s Self Service Kiosks so hackable?. Parent comment

Re:Why are McDonald’s Self Service Kiosks so hackable? by closewith on Monday July 25, 2022 @02:07AM (#32221031)
Do you have a source for this?

The EMV spec doesn’t include encryption of any data sent to the terminal from the card.

The transaction cryptogram is signed, however.

[ Parent | on HN ]
Re:Why are McDonald’s Self Service Kiosks so hackable? by charles_kaw on Wednesday July 27, 2022 @01:42AM (#32247237)
The terminals themselves use mtls to communicate and wrap the payload , wasn't referring to the payload itself.
[ Parent | on HN ]
Re:Why are McDonald’s Self Service Kiosks so hackable? by closewith on Wednesday July 27, 2022 @07:15AM (#32249093)
That seems like a walkback? You said:

> However, the card terminal does not see unencrypted payment data.

The card terminal does see unencrypted payment data. Hard to see your comment as ambiguous?

[ Parent | on HN ]