3 ms·
Why are CVVs, a 3 digit number that would be trivial to brute force, the key to unlocking access to a user's credit? Why don't we start with that problem first?
by craftyguy 9y ago
Why are CVVs, a 3 digit number that would be trivial to brute force, the key to unlocking access to a user's credit? Why don't we start with that problem first?
- mrguyorama 9y agoAFAIU, you cannot check whether a CVV is correct without pinging the company that manages the card, and attempting to ping them on average 500 times per card with different CVVs is not normal activity and should be blocked/shut down. This is CC fraud prevention 101
- craftyguy 9y agoOk, how about the fact that it's incredibly visible to begin with? It's being used like a PIN, a PIN that's literally printed right on the card. Who writes their debit card PIN on the back of their card?
- dragonwriter 9y agoIt supposed to be used as proof that you have physical control of the card, which is why it is on the card and not supposed to be stored. It's not used “like a PIN” as a second factor with the physical card as the first factor, it is used to make online and certain other uses of a card equivalent to card-present transactions with no substantive second factor.