News for hackers. Stuff that matters.

A comment on How I got a Root Shell on a Credit Card Terminal. Parent comment

Re:How I got a Root Shell on a Credit Card Terminal by thwarted on Sunday June 01, 2025 @02:22PM (#44152784)
Credit card companies eat the cost of fraudulent charges that they can not pass on to/blame the merchant for.
[ Parent | on HN ]
Re:How I got a Root Shell on a Credit Card Terminal by Aurornis on Sunday June 01, 2025 @02:30PM (#44152828)
Which is why they won’t have a public API that allows running transactions that send money to arbitrary accounts.

If someone altered the terminal to charge more (a hypothetical suggestion above), they could recoup that money from the merchant’s account because they have an agreement in place.

You can’t run arbitrary transactions to arbitrary accounts (the other proposed attack above) because there isn’t an agreement in place.

[ Parent | on HN ]