News for hackers. Stuff that matters.

A comment on Crazy Thin ‘Deep Insert’ ATM Skimmers. Parent comment

Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by bri3d on Wednesday September 14, 2022 @08:19PM (#32845334)
There are a large number of “smart” tab systems in use in US bars where the system retains your magnetic stripe data for the duration of your visit. You pass off your card, it is swiped and immediately returned. If you don’t settle your tab, it’s automatically settled with a pre-set tip using the stored track data. It’s convenient for bar owners and patrons as the bar doesn’t have leftover cards to deal with and the patron doesn’t have to retrace their steps to recover their forgotten card the next day.
[ Parent | on HN ]
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by Reason077 on Wednesday September 14, 2022 @09:06PM (#32845703)
Interesting, I haven't encountered such a system at UK bars/pubs. Either it's entirely pay-as-you-go (easy when everyone has contactless), or, at fancier places, they'll trust you to run a tab without taking a card up front.
[ Parent | on HN ]
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by ThePowerOfFuet on Friday September 16, 2022 @02:35AM (#32862831)
> There are a large number of “smart” tab systems in use in US bars where the system retains your magnetic stripe data for the duration of your visit.

What a security nightmare.

[ Parent | on HN ]
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by bri3d on Friday September 16, 2022 @11:01AM (#32866965)
More or less a security nightmare than a drawer or tray full of physical credit cards behind a busy bar at night, which is the alternative at US bars? I'd argue that time-shifting card data is actually safer, even if it is often against the merchant agreement.

I really haven't heard of much trouble caused by these systems - of course, they require magnetic stripes in general, which are a massive attack vector, but the bar use case specifically doesn't seem to cause additional issues that I'm aware of. There are so many lower-tech and easy ways to steal magnetic track data, like skimmers, that I don't think compromising bar-back point of sale systems is a particularly high priority for most criminals.

Anyway, this is probably just a small snapshot in time regardless, since once swiped-card transactions finally go away US bars will have to switch to the mobile terminal pay-as-you-go method anyway.

[ Parent | on HN ]
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by ThePowerOfFuet on Friday September 16, 2022 @12:53PM (#32868866)
>Once swiped-card transactions finally go away US bars will have to switch to the mobile terminal pay-as-you-go method anyway.

Now you get it.

[ Parent | on HN ]
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by justsomehnguy on Wednesday September 14, 2022 @08:40PM (#32845508)
>> It’s convenient for bar owners and patrons

LOL. It's convenient for bar owners. Patrons doesn't give a shit about that.

[ Parent | on HN ]
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by pdntspa on Wednesday September 14, 2022 @11:41PM (#32846708)
Speak for yourself, I can't tell you how many times I've left my card at the bar because of an open tab. Nowadays I'll favor places that give me my card back when I open a tab.
[ Parent | on HN ]
Re:Crazy Thin ‘Deep Insert’ ATM Skimmers by bri3d on Wednesday September 14, 2022 @08:54PM (#32845612)
When the alternative is “hold onto the card” and you have to track it down or order a new one, sure it’s more convenient for the customer too…
[ Parent | on HN ]