Payment cards. For questions about storing credit card numbers, see also pci-dss. For questions involving the physical object, see also smartcard (if the card has a chip).
25
votes
3answers
9k views
How does Amazon bill me wihout the CVC / CVV / CVV2?
The card in question is a VISA, if that's of any importance. I've noticed this only on Amazon. All other sites I've purchased something from, ever, have needed the CVC code for the card. However, I ...
31
votes
5answers
3k views
What's the impact of disclosing the front-face of a credit or debit card?
There are quite a few cases where people are called out for disclosing the front-face of a credit or debit card (e.g. this tweet from Brian Krebs or this twitter account). So I was wondering what the ...
20
votes
4answers
12k views
What is the use of stolen credit card details?
What can a person with stolen credit card details do?
Buy porn?
Buy tons of server resources to perform an attack?
What else? I'm sure that if he buys books, shoes and bicycles or transfer funds ...
15
votes
4answers
545 views
Credit card forms on HTTP pages a MITM risk?
The other day, there was a web developer mailing list thread about a fundraiser page.
One person noted that the page with the credit card form was HTTP, not HTTPS.
In response, one person said that ...
3
votes
3answers
791 views
How to spoof an ATM transaction?
About 20 years ago, a man disappeared, but his ATM card was "supposedly" used the day after the disappearance. However, surveillance footage of the store shows no-one in the store physically used the ...
3
votes
1answer
161 views
Fraud Mitigation - Card Present Transactions
When it comes to fraud screening for card not present transactions (credit card / debit card) there are a number of techniques / services that can be utilized to mitigate risks from fraudulent ...
6
votes
4answers
694 views
Is it standard practice to ask a customer to send a photo of their credit card to confirm their identity?
My friend ordered clothes from a clothing site and was asked to send a picture of her credit card.
Is it standard practice to ask a customer to send a photo of their credit card to confirm their ...
2
votes
2answers
469 views
Why does Amazon ask for the CVC/CVV if it bills without it?
I have a follow-up question relating to this question:
How does Amazon bill me wihout the CVC / CVV / CVV2?
If amazon.com can bill without the CVV why does it ask for it the first time information ...
5
votes
1answer
149 views
What's the use of adding a challenge to a one time password algorithm?
In these YouTube videos Challenge-Respond Mode and Sign Mode the customer enters a challenge into the CAP device before generating a one time password. Why not just generate the one time password ...
