Skip to main content
Information Security

Return to Answer

added 140 characters in body
Source Link
bbozo
bbozo
  • 511
  • 6
  • 19

Well, https://www.youtube.com/watch?v=elBWoMXt3WY - early contactless implementations simply broadcasted the PAN in the NFC radius. A super-bad idea, with EMV, PIN etc things have improved.

CVV is a 3 number code, not really a security measure as such that a patient attacker will not break eventually, PAN is kept as sensitive data in the PCI DSS standard for a reason.

I don't want to give anybody any ideas, so just take me on my word when I tell you there is plenty of attack vectors available to a determined and patient attacker contrary to what some answers might lead you to believe.

Well, https://www.youtube.com/watch?v=elBWoMXt3WY

CVV is a 3 number code, not really a security measure as such that a patient attacker will not break eventually, PAN is kept as sensitive data in the PCI DSS standard for a reason.

I don't want to give anybody any ideas, so just take me on my word when I tell you there is plenty of attack vectors available to a determined and patient attacker contrary to what some answers might lead you to believe.

Well, https://www.youtube.com/watch?v=elBWoMXt3WY - early contactless implementations simply broadcasted the PAN in the NFC radius. A super-bad idea, with EMV, PIN etc things have improved.

CVV is a 3 number code, not really a security measure as such that a patient attacker will not break eventually, PAN is kept as sensitive data in the PCI DSS standard for a reason.

I don't want to give anybody any ideas, so just take me on my word when I tell you there is plenty of attack vectors available to a determined and patient attacker contrary to what some answers might lead you to believe.

Source Link
bbozo
bbozo
  • 511
  • 6
  • 19

Well, https://www.youtube.com/watch?v=elBWoMXt3WY

CVV is a 3 number code, not really a security measure as such that a patient attacker will not break eventually, PAN is kept as sensitive data in the PCI DSS standard for a reason.

I don't want to give anybody any ideas, so just take me on my word when I tell you there is plenty of attack vectors available to a determined and patient attacker contrary to what some answers might lead you to believe.