According to an article in BankInfo Security, Visa and Mastercard have given fuel pump terminal vendors an additional 3 years to add support for EMV.
Visa and MasterCard announced this week that they are pushing back their liability shift dates for counterfeit card fraud that results at non-EMV chip-compliant U.S. pay-at-the-pump gas terminals to October 2020 from October 2017.
That news is an early Christmas gift for convenience-store operators and the petrol industry, even though if it leaves issuers on the hook three years longer for counterfeit fraud that might result from a hack or skimming attack at self-serve gas pumps.
But I wonder how much fuss issuers will make about the extension. Counterfeit card fraud at gas pumps pales relative to retail point-of-sale and ecommerce fraud. And despite what we heard five years ago about pay-at-the-pump skimming reaching nearly "epidemic" proportions, we hear much less about it today. That's not to say it's gone away, by any means; but it no longer appears to be a looming epidemic
Visa and MasterCard made the right decision to give gas pumps a break on EMV. The question now is, will the three year extension be enough?
(Score: 2) by VLM on Wednesday December 14 2016, @08:59PM
You know how when you go to the grocery store and the new credit card swiper has tape over the chiphole (technical term?) and a note saying chip doesn't work just swipe it?
As of this October about 75% of the countries retaillers are like that, and if there's any fraud the store eats the losses instead of the bank.
If the chiphole works, then back to BAU and the bank eats fraud losses.
And this story specifically states gas stations don't eat the loss until 2017 or WTF it is, as an exception.
I've noticed chip is really freaking slow because its real time. When I swipe at home depot its instant because queue and process as they catch up and send me on my way (maybe because I've been a customer a long time so they don't freak about my card number, perhaps they store it or hopefully a salty hash). But now with chiphole use at home depot its like 20 seconds per transaction and we're back to cash being quicker than credit.
Which interestingly might fire up some of those apparently dumb "muh cellphone is muh wallet" startups that almost no one uses but coffee shops (the drink kind not the weed kind, although theres some overlap I'm sure).
(Score: 2) by takyon on Wednesday December 14 2016, @09:16PM
Since I wrote my last comment about this, I've found that the chip worked in maybe 5 seconds in one instance (Walmart maybe?) and considerably longer in other stores.
I think ALDI uses the scotch tape over the chiphole, as you might expect. They also only recently started accepting credit cards in the first place.
[SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]
(Score: 2) by Scruffy Beard 2 on Wednesday December 14 2016, @10:59PM
If it takes more than a few seconds they are probably using dial-up.
Or, if it is around Christmas, the server is just overloaded.
The old magstripe system is vulnerable to the replay attack soo badly, that they call it "identity theft" when you copy the transaction.
(Score: 3, Interesting) by urza9814 on Thursday December 15 2016, @09:55PM
You can usually force a 'fallback transaction' (using the mag stripe) by inserting the card backwards. It'll fail immediately; do it three times in a row and it'll let you swipe. And doing that doesn't impact the liability -- it's still on the card issuer because the POS *supports* the chip, even if it isn't used.
(Score: 2) by wonkey_monkey on Wednesday December 14 2016, @09:47PM
If the chiphole works, then back to BAU
What's BAU?!
Please don't use an acronym in your answer...
systemd is Roko's Basilisk
(Score: 2) by VLM on Wednesday December 14 2016, @10:06PM
Business As Usual. Blame the brits I think it was a Churchill-ism from about a century ago.
Back when memes were transmitted on telegraph lines there was one making the rounds about the "business of WTF is WTF" (And WTF is an acronym for, oh forget about it) and from memory Churchill, who probably would have been a massive shitposter on /pol/ had he lived long enough, said something about the business of the UK or Britain or whatever is BAU.