News for hackers. Stuff that matters.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by gpt5 on Wednesday September 14, 2022 @06:37PM (#32844402)
Contactless transactions using your phone are fast, secure and easy. Over time they will replace almost all current usage of chip & pin or magnetic stripe.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by akira2501 on Wednesday September 14, 2022 @06:41PM (#32844445)
No thanks. I like things that work without having to be charged.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by tempofinale on Wednesday September 14, 2022 @07:53PM (#32845111)
Charged for what? I have payment options on my phone so I don't have to bring my wallet everywhere. Works great, even for public transit and it's the same price as the card.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by akira2501 on Wednesday September 14, 2022 @08:26PM (#32845388)
Charged as in has a full and operational battery. A card with a chip in this does not require that. I can also intentionally give someone else my card to effect a purchase and neither myself nor my phone actually has to be there.

Fraud clearly hasn't had a deleterious effect on the entire system, and the penalties for fraud align incentives to fight fraud properly. It's not such a large problem that I'm willing to take steps backwards in terms of functionality and privacy to digitize my purchasing.

Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by arjvik on Wednesday September 14, 2022 @11:06PM (#32846490)
Modern iPhones actually support being used for NFC payments even when they're dead (using a tiny bit of reserve power)
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by toomuchtodo on Wednesday September 14, 2022 @11:28PM (#32846624)
Wouldn’t it be cool if payment terminals were also Qi enabled so even if the phone was dead it could provide enough power wirelessly to enable payments to be made?
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by fastball on Thursday September 15, 2022 @02:22AM (#32847846)
That's actually already how NFC works. The chip being read doesn't need its own source of power – the EM field in the terminal induces a current in the target NFC chip and then uses that same EM field to read the contents. That's why your contactless debit card doesn't need a battery.

Powered devices like a phone have read/write NFC chips that the device will write data to on demand, usually waiting for some form of user auth to make it secure, e.g. an iPhone keeps the NFC chip empty until you specifically request to pay for something, at which point it authenticates you (e.g. with FaceID) and then writes the data to the chip which can then be read by the terminal to authorize payment. Once payment has been made it wipes the NFC chip again.

But a device can have some payment info written to the NFC chip at all times, which is what iPhones do when you have the "Express Transit Card" option enabled – with certain authorized vendors, that payment data stays on your phones NFC chip indefinitely, so you don't need to auth with FaceID and even when the phone is out of battery it can still be read by those authorized terminals.

Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by toomuchtodo on Thursday September 15, 2022 @10:56AM (#32852960)
Brilliant. TIL!
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by unstatusthequo on Wednesday September 14, 2022 @09:48PM (#32846028)
If your threat model is a modern phone running out of battery, I suggest an external battery pack. Portable, powerful, and allows you not to carry a slow chip and pin.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by iggldiggl on Thursday September 15, 2022 @12:19PM (#32854284)
Maybe I've picked the wrong phones, but I've also found them to occasionally completely die without any advance warning even if treated carefully, so I remain a bit wary about using them for anything ultra-critical.

And mobile phone providers over here don't guarantee even two nines of reliability, never mind that even 3½ days of no service per year is already too much for some critical things, like being able to get at your money.

And the local public transport association for example tries to disclaim any responsibility for any sort of problems if you're using their mobile ticketing app – if it doesn't work, though luck, your problem, buy a new ticket or pay a fine. Even if you've bought a monthly season ticket there are no special provisions, and the rules don't even differentiate between technical issues caused by myself [1], those caused by third parties (like the mobile service provider) or those caused by the public transport provider respectively its app developers themselves.

[1] Although while I can take care to keep it sufficiently charged, not letting it fall to the ground or whatever, I still can't prevent it from just randomly dying anyway, or the manufacturer issuing some borked update or whatever

Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by lolinder on Wednesday September 14, 2022 @08:26PM (#32845386)
Charged with electricity.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by 2OEH8eoCRo0 on Thursday September 15, 2022 @08:23AM (#32850673)
Or require an account from Apple or Google or other hurdles between me and my bank.

I now need a phone that I keep charged, up to date, with cellular connectivity, and logged into some tech behemoth in order to pay for goods?

Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by zepppotemkin on Wednesday September 14, 2022 @08:03PM (#32845197)
personally I hate the idea of always needing a phone with me -- i leave mine at home most of the time just using my wallet and nfc transit card to get around
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by TillE on Wednesday September 14, 2022 @09:47PM (#32846024)
Difficult to overstate how much you're in an extreme, extreme minority position if you own a smartphone and don't carry it around pretty much everywhere.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by jjav on Thursday September 15, 2022 @01:42AM (#32847538)
My phone lives in my backpack, if I don't have my backpack on me (which is most of the time) I'm not going to have a phone.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by zepppotemkin on Tuesday September 20, 2022 @10:14PM (#32920156)
that's one of the pirmary things for me too even as a guy with usually large pockets i find it annoying to walk around with them in my pocket espcially in the summer

plus on the bus or train I usually use a book or my kindle so it's easy to forget the phone

Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by cuteboy19 on Wednesday September 14, 2022 @10:22PM (#32846245)
You can use a phone for everything but a card for only one thing. The choice is clear
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by MBCook on Wednesday September 14, 2022 @09:58PM (#32846094)
You may think that, but get an Apple Watch or other smart watch that can do it. 10x better than the phone was. Don’t need to get anything out of your pocket or even carry the phone in the first place.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by fastball on Wednesday September 14, 2022 @10:21PM (#32846244)
Although GP did say "phone", I don't think they really intended to exclude even better NFC form factors from their prophesy.
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by schwartzworld on Wednesday September 14, 2022 @06:51PM (#32844544)
Sounds like a nightmare
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by grishka on Wednesday September 14, 2022 @07:48PM (#32845071)
You can also tap with the card but you'll have to enter the PIN if you're paying more than some amount (different for different currencies and/or banks).