Today, as I was picking up my dry cleaning I watched the attendent swipe my card through the reader and enter in the amount then asked me to enter my PIN. When I entered my PIN and hit enter I began to wonder what happens to that information as it's whisked out onto the wire on it's way to my bank for authorization. Is it encrypted in any form, is my PIN hashed before being sent, or as I suspected in the most likely answer, is the data sent over the wire in plain text. Hey, I work in information security, these are the things that I worry about.
Well it turns out my third theory was correct. An article over at The Register talks about a group of scam artists in Thailand that stole credit card information using wiretap equipment, then smuggled the information to Malaysia for encoding on to phony cards. According to the Thai police, an estimated $1.59M dollars was fraudulently charged over a 6 month period while an additional $9.5M in charges is still being investigated.
Another thing that concerns me is that some of these credit card machines don't even use phone lines anymore, they have connections to the internet for performing authorizations. Ideally, these machines would connect to the credit transaction clearinghouse via an encrypted VPN, but given the history of financial services lack of security, I doubt that is the case.
Here is the second installment of some of my favorite quotes. These are quotes that express how I feel about things in life. Some of them evoke feelings of sympathy or pride or my personal favorite humor.
"Wise men talk because they have something to say; fools, because they have to say something." - Plato
"I've learned that people will forget what you said, people will forget what you did, but people will never forget how you made them feel." - Maya Angelou
"Patience has its limits. Take it too far, and it's cowardice." - George Jackson
"Regret for the things we did can be tempered by time; it is regret for the things we did not do that is inconsolable." - Sidney J. Harris
"The entire sum of existence is the magic of being needed by just one other person." - Unknown
The opinions expressed herein are my own personal opinions and do not represent my employer's view in anyway.
E-mail