Stories
Slash Boxes
Comments

SoylentNews is people

posted by cmn32480 on Wednesday December 14 2016, @08:01PM   Printer-friendly
from the pumping-up-security dept.

According to an article in BankInfo Security, Visa and Mastercard have given fuel pump terminal vendors an additional 3 years to add support for EMV.

Visa and MasterCard announced this week that they are pushing back their liability shift dates for counterfeit card fraud that results at non-EMV chip-compliant U.S. pay-at-the-pump gas terminals to October 2020 from October 2017.

That news is an early Christmas gift for convenience-store operators and the petrol industry, even though if it leaves issuers on the hook three years longer for counterfeit fraud that might result from a hack or skimming attack at self-serve gas pumps.

But I wonder how much fuss issuers will make about the extension. Counterfeit card fraud at gas pumps pales relative to retail point-of-sale and ecommerce fraud. And despite what we heard five years ago about pay-at-the-pump skimming reaching nearly "epidemic" proportions, we hear much less about it today. That's not to say it's gone away, by any means; but it no longer appears to be a looming epidemic

Visa and MasterCard made the right decision to give gas pumps a break on EMV. The question now is, will the three year extension be enough?


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by VLM on Wednesday December 14 2016, @08:59PM

    by VLM (445) Subscriber Badge on Wednesday December 14 2016, @08:59PM (#441421)

    You know how when you go to the grocery store and the new credit card swiper has tape over the chiphole (technical term?) and a note saying chip doesn't work just swipe it?

    As of this October about 75% of the countries retaillers are like that, and if there's any fraud the store eats the losses instead of the bank.

    If the chiphole works, then back to BAU and the bank eats fraud losses.

    And this story specifically states gas stations don't eat the loss until 2017 or WTF it is, as an exception.

    I've noticed chip is really freaking slow because its real time. When I swipe at home depot its instant because queue and process as they catch up and send me on my way (maybe because I've been a customer a long time so they don't freak about my card number, perhaps they store it or hopefully a salty hash). But now with chiphole use at home depot its like 20 seconds per transaction and we're back to cash being quicker than credit.

    Which interestingly might fire up some of those apparently dumb "muh cellphone is muh wallet" startups that almost no one uses but coffee shops (the drink kind not the weed kind, although theres some overlap I'm sure).

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2) by takyon on Wednesday December 14 2016, @09:16PM

    by takyon (881) <reversethis-{gro ... s} {ta} {noykat}> on Wednesday December 14 2016, @09:16PM (#441428) Journal

    Since I wrote my last comment about this, I've found that the chip worked in maybe 5 seconds in one instance (Walmart maybe?) and considerably longer in other stores.

    I think ALDI uses the scotch tape over the chiphole, as you might expect. They also only recently started accepting credit cards in the first place.

    --
    [SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]
    • (Score: 2) by Scruffy Beard 2 on Wednesday December 14 2016, @10:59PM

      by Scruffy Beard 2 (6030) on Wednesday December 14 2016, @10:59PM (#441457)

      If it takes more than a few seconds they are probably using dial-up.

      Or, if it is around Christmas, the server is just overloaded.

      The old magstripe system is vulnerable to the replay attack soo badly, that they call it "identity theft" when you copy the transaction.

    • (Score: 3, Interesting) by urza9814 on Thursday December 15 2016, @09:55PM

      by urza9814 (3954) on Thursday December 15 2016, @09:55PM (#441806) Journal

      You can usually force a 'fallback transaction' (using the mag stripe) by inserting the card backwards. It'll fail immediately; do it three times in a row and it'll let you swipe. And doing that doesn't impact the liability -- it's still on the card issuer because the POS *supports* the chip, even if it isn't used.

  • (Score: 2) by wonkey_monkey on Wednesday December 14 2016, @09:47PM

    by wonkey_monkey (279) on Wednesday December 14 2016, @09:47PM (#441438) Homepage

    If the chiphole works, then back to BAU

    What's BAU?!

    Please don't use an acronym in your answer...

    --
    systemd is Roko's Basilisk
    • (Score: 2) by VLM on Wednesday December 14 2016, @10:06PM

      by VLM (445) Subscriber Badge on Wednesday December 14 2016, @10:06PM (#441444)

      Business As Usual. Blame the brits I think it was a Churchill-ism from about a century ago.

      Back when memes were transmitted on telegraph lines there was one making the rounds about the "business of WTF is WTF" (And WTF is an acronym for, oh forget about it) and from memory Churchill, who probably would have been a massive shitposter on /pol/ had he lived long enough, said something about the business of the UK or Britain or whatever is BAU.