Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Well, note the numbers shown here: http://krebsonsecurity.com/2014/05/the-target-breach-by-the-...

0 – The number of customer cards that Chip-and-PIN-enabled terminals would have been able to stop the bad guys from stealing had Target put the technology in place prior to the breach (without end-to-end encryption of card data, the card numbers and expiration dates can still be stolen and used in online transactions).

So do we know if it would have stopped the Home Depot breach?



An important point to note is that, if banks want/care, they can put other safeguards that solve this problem, too. In Europe it is common for banks to text you a 6 number pin to confirm an online transaction, for example. There is no good reason to not do these things. It's still not perfect, but certainly much better.


So I can't quite see this working in a physical retail location, which is where the Target and Home Depot happened.

So this, like chip and pin, would not have helped these particular issues.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: