News for hackers. Stuff that matters.
Re:Why are McDonald’s Self Service Kiosks so hackable? by atwood22 on Monday July 25, 2022 @10:03AM (#32224454)
Are you sure? I thought chip cards worked using certificates signed by the card issuer. And transactions involved sending a nonce to be signed. Everything can be verified by the public key. I could totally be wrong though.
Re:Why are McDonald’s Self Service Kiosks so hackable? by lyall on Monday July 25, 2022 @10:11PM (#32233454)
Maybe that's how IC cards work in some places, but that's definitely not the normal EMV standard. I've worked on the implementation of EMV chip card processing through basically all the major networks and can tell you that we necessarily have access to—and have to store after—the raw card number to facilitate the transaction. There's a lot of encryption involved to prevent bad actors from getting access but it's far from end-to-end.