[pchelpers] What's behind retail data breaches
- From: Ellen M <ejmay@xxxxxxxxx>
- To: pchelpers@xxxxxxxxxxxxx
- Date: Sat, 22 Sep 2007 11:24:12 -0700 (PDT)
this is a troubling report from C|Net. sorry it's a bit old (Sept 19)
Back in 1992, Dr. Neal Krawetz, now of Hacker Factor, and several partners
had an idea: they wanted to bring credit card transactions to a local flea
market. Better yet, they wanted De Anza Junior College in Cupertino,
California, to offer wireless transactions from the open-air stalls, operating
over packet radio. The idea was good enough that they secured a meeting with
Verifone, the largest provider of credit card swiping equipment in North
America. During the meeting, Verifone agreed to loan the them one of their
Tranz 330 transaction units, perhaps the most commonly used credit card swiper
in the world. But before handing it over, the Verifone person took out a
12-page document, then keyed in a master password reset. Intrigued, Krawetz
remembers asking what's to stop someone from stealing the credit card data
within. Verifone replied that it was aware of the risk and said "it's being
addressed." Krawetz said recently, "if an expert tells me that, I'm going to
believe
them." Now, 15 years later, he has gone public (click for PDF), with more or
less the details of the flaw he first observed in 1992, the flaw that Verifone
and other companies still haven't addressed.
http://reviews.cnet.com/4520-3513_7-6774939-1.html?tag=nl.e404
Cheers,
Ellen M.
---------------------------------
Moody friends. Drama queens. Your life? Nope! - their life, your story.
Play Sims Stories at Yahoo! Games.
--
-------list-services-below-----------
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at http://www.freelists.org/cgi-bin/lsg2.cgi
List archives at http://www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Latest news live feeds at http://modecideas.com/indexhomenews.htm?sig
Good advice is like good paint- it only works if applied.
- Follow-Ups:
- [pchelpers] Re: What's behind retail data breaches
- From: John Durham
- [pchelpers] Re: What's behind retail data breaches
- From: Scott McNay
- References:
- [pchelpers] Article:Hackers control PCs while users unaware
- From: John Durham
Other related posts:
- » [pchelpers] What's behind retail data breaches
- » [pchelpers] Re: What's behind retail data breaches
- » [pchelpers] Re: What's behind retail data breaches
- » [pchelpers] Re: What's behind retail data breaches
- [pchelpers] Re: What's behind retail data breaches
- From: John Durham
- [pchelpers] Re: What's behind retail data breaches
- From: Scott McNay
- [pchelpers] Article:Hackers control PCs while users unaware
- From: John Durham