3 ms·
Although you can disable the bits in the service code pertaining to the cards ICC capabilities, in theory there's a good chance that the track2 equivalent data
by Loggie 4y ago
Although you can disable the bits in the service code pertaining to the cards ICC capabilities, in theory there's a good chance that the track2 equivalent data on the chip is different from the track2 data on the magstrip. That would make it easy for the issuer to determine that the track2 has been modified and reject the transaction and/or flag the account for fraudulent activity.
- Scoundreller 4y agoYeah, whenever I try to swipe my card, it instantly tells me to use Chip and PIN. I think it's just to provide rapid localized responses, but who knows if some banks are misconfigured and overly trusted the magstripe data to block magstripe transactions.
- ComputerGuru 4y agoBut that's what's covered in the article. The "block transaction and require chip and PIN" flag is stored on the magtrack itself.
- lxgr 4y agoThe bank/processor also knows it and is able to reject any modifications. Whether they do is a matter of their security posture.
- ImPostingOnHN 4y agothe article covers that too, saying that the issuer does not seem to do such verification