Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I've been reading a lot about one-time-use online credit card numbers (e.g. https://www.discover.com/credit-cards/member-benefits/security/create-online-account-number.html#) but I have to admit that I'm actually more worried about small businesses getting exploited (e.g. http://arstechnica.com/business/news/2011/12/how-hackers-gave-subway-a-30-million-lesson-in-point-of-sale-security.ars)

Does anyone know of a company or card that's offering one-time-use physical cards? Or do I just need to start investing in prepaid cards?

share|improve this question
3  
You'd probably get answers more focused on the money/consumer side on money.SE. –  bstpierre Jan 2 '12 at 3:05
    
Thanks, I knew there would be a subSE but I couldn't think of it. –  Chuck Vose Jan 11 '12 at 21:36
    
Thanks Gilles, I couldn't make a tag. –  Chuck Vose Jan 13 '12 at 22:35
    
I just read the articles you link to, in the second one the suggestion that the price of the software is correlated to how good the security is, is bogus. –  richard Jan 14 '13 at 11:02
add comment

3 Answers

up vote 5 down vote accepted

The ars technia story is about small businesses non-compliance with PCI DSS by hosting payment card transactions in vulnerable platforms. It is not about well prepared, IT security savvy small businesses being beaten by better hackers.

I believe this is a consequence of the small businesses not understanding the risks they are assuming. Assuming meaning taking upon themselves instead of mitigating or transferring.

Credit card users can mitigate exposure to payment card fraud by using one time use online credit card numbers. i.e. If the card number and authenticating data for a transaction are captured by a malicious adversary, the data would not allow the adversary to make a second charge.

What are the potential hazards to a small business owner?

The only potential hazard I can think of is the ability to disguise repeated use of a single unauthorized account.

For a single business owner this would require a adversary with a account capable of generating one time use credit card numbers targeting a single business with multiple transactions using different credit card numbers. I would assume the adversary would be able to make other associated information like name or shipping address appear unrelated. If this was the case fraud detection would be difficult.

However, I suspect most savvy malicious adversaries would spread the spending across many merchants to prevent detection by the credit issuer.

share|improve this answer
add comment

I suggest looking for 2 types of pre-paid cards in your local area. First, check local CVS or Walgreens for the Vanilla Visa. The better card is at the mall, though, and it's called the Simon Gift Card.

share|improve this answer
add comment

Many companies offer one-time credit card numbers but a one-time physical card is just a subset of the pre-pay card model.

What application wouldn't work with either disposable one-time numbers or a pre-pay card? I can't think of any reason for it.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.