News for hackers. Stuff that matters.
Re:Credit cards are vulnerable to brute force kind attacks by lxgr on Friday May 01, 2026 @07:08PM (#47981552)
Only digital wallets, or also any merchant that saved the card using a token? The latter is getting more and more common, but usually happens transparently to the cardholder.

Theoretically, it would allow a pretty neat feature of being able to manage all merchants that have a copy of the card in the banking app and revoke said copies – but since token use is not mandatory, that would be fairly confusing, so I haven't seen this yet as far as I remember.

FWIW, India has taken a pretty radical step towards that future at a regulatory level by effectively mandating merchants to no longer store the underlying card number and use tokens instead. I suspect that such an interface would be more common there, but I don't have any personal experience.

Re:Credit cards are vulnerable to brute force kind attacks by pxeboot on Saturday May 02, 2026 @11:19AM (#47987178)
> Only digital wallets, or also any merchant that saved the card using a token?

Only digital wallets. Specifically, Apple Pay, Garmin Pay, and Google Pay.