Re:Booking.com hackers increase attacks on customers
by zinekeller on Friday December 01, 2023 @10:17AM
(#38487692)
Probably meant sending the payment details without tokenization, which in practice means sending a merchant-specific (in case of this one, hotel-specific) card details (https://www.emvco.com/emv-technologies/payment-tokenisation/). A lot of hotels, for some reason that I still don't know, are still relying on MOTO methods to process payments, and MOTO requires the whole card number/PAN, name on file, expiry, and CVV to be sent (which I encounter from-time-to-time because my non-MOTO Mastercard is being rejected for being too weird). Combine that with the fact that US cards don't really enforce 3DS means that you'll have a card number bonanza usable for most American stores.
[ Parent
| on HN ]
Re:Booking.com hackers increase attacks on customers
by PopAlongKid on Friday December 01, 2023 @10:33AM
(#38487903)
What is MOTO? Nothing helpful from internet search or link in parent comment.