“Borrow” Payment Cards with NFC Proxy Hardware

Contactless payments are growing in popularity. Often the term will bring to mind the ability to pay by holding your phone over a reader, but the system can also use NFC tags embedded in credit cards, ID card, passports, and the like. NFC is a reasonably secure method of validating payments as it employs encryption and the functional distance between client and reader is in the tens of centimeters, and often much less. [Haoqi Shan] and the Unicorn team have reduced the security of the distance component by using a hardware proxy to relay NFC interactions over longer distances.

The …read more

Continue reading “Borrow” Payment Cards with NFC Proxy Hardware

WePay now accepts Apple Pay and Android Pay on the web

Apple Pay and Android Pay may be best known as Apple and Google’s mobile wallets, designed to expand their businesses in making payments with smartphones. But today comes an advance that underscores how both are also vying to be consumers’ virtual wallets for all e-commerce transactions. WePay, the payments company that competes against the likes of incumbents like FirstData… Read More Continue reading WePay now accepts Apple Pay and Android Pay on the web

How to Spot Ingenico Self-Checkout Skimmers

A KrebsOnSecurity story last month about credit card skimmers found in self-checkout lanes at some Walmart locations got picked up by quite a few publications. Since then I’ve heard from several readers who work at retailers that use hundreds of thousands of these Ingenico credit card terminals across their stores, and all wanted to know the same thing: How could they tell if their self-checkout lanes were compromised? This post provides a few pointers. Continue reading How to Spot Ingenico Self-Checkout Skimmers