noc.social is part of the decentralized social network powered by Mastodon.
This instance is focused on technology, networking, linux, privacy, security, infosec, engineering, but open to anyone. Civil discourse, polite and open. Managed by the noc.org / trunc.org team.

Administered by:

Server stats:

679
active users

Learn more

Today I learned

Mythbusters were going to do an episode which highlighted the immense security flaws in most credit cards. But Discovery was threatened by - and eventually gave into - immense legal pressure from the major credit card companies to not air the episode.
youtube.com/watch?v=-St_ltH90O

Original tweet : nitter.privacydev.net/tilbots/

@todayilearned

I still remember that revelation . It was an astonishing moment back on the 18th floor of the now razed Hotel Pennsylvania.

@Aphrodite @todayilearned Somebody totally needs to do a show on the subject and self host it and get more views than youtube can give, and totally get sued to hell and back, and take one for the team.

@Aphrodite @todayilearned Disregard that, I guess there's shitloads of web sites that describe it now, but I wish they'd do something to destroy the credit card industry as a whole.

@todayilearned is it still a practice in the US to just “swipe” a card? And can you still pay on the internet with a card without any kind of second authentication?

@cryptomer
על מה מדובר? איזו חולשה יש ב rfid של כרטיסי האשראי?

@todayilearned
Didn't realize how old the video was at first.

But yeah, EMV cards have sooo many bugs, I still find out some randomly.

Though the most entertaing to reproduce was probably the preplay attack by downgrading Mastercard to kernel 2 (and it had only 1000 "unpredictable" numbers) around 2014.

Latest entertaining was I think the PIN bypass on Visa, which was then also present on Mastercard because they emulated their code.

I still have to build this antenna in TODO, it would be lot of fun: cs.ru.nl/~erikpoll/papers/rfid