Obviously mag stripe skimming is thriving in New Zealand, regardless of CVV2 usage - CVV1 is still in the mag stripe and it's that's needed for machine operation when the CVV2 is not asked for.
Yeah thats always confused me - I assume the point is once we all have chips then they phase out the stripe? until then the whole security of the card is compromised by the stripe?
freitasm: A couple of years ago I was interested to find out why Dick Smith would use my credit card on EFTPOS terminals and then enter my credit card number in their POS - I mean, it's paid, accepted, they don't have to store my credit card for anything, so why do they?
Did you ever find out? I remember they used to write the last four digits on a copy of the receipt that went in the till.
writing the number is to proove they read it and it matches what the card swiped as.
If they are putting card data into the pos system will be interesting if they really are pci complient or not. Not that anyone cares when places are not.
eXDee: Yeah thats always confused me - I assume the point is once we all have chips then they phase out the stripe? until then the whole security of the card is compromised by the stripe?
not as much as all the info needing to charge it being on the card in plaintext embossing. stripes can be rewritten as bnz do. numbers on the card are for life of the card and changing cards is a pita when banks refuse to issue a stack of spares and you have to reestablish charging with merchants on every card change.
Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly
to your computer or smartphone by using a feed reader.