3 ms·
They do, but you can't get the card number from reading the chip. The protocol is a challenge-response one based on a private key stored within the chip. https
by jjmarr 3y ago
They do, but you can't get the card number from reading the chip. The protocol is a challenge-response one based on a private key stored within the chip.
https://en.wikipedia.org/wiki/Chip_Authentication_Program https://en.wikipedia.org/wiki/Chip_Authentication_Program
You need to read the entire card number + cvc2 + expiry date with your camera. That's not skimming, that's just taking a photo of the card.
- worewood 3y agoYeah, and it's easily solvable with a sticker or a dremel to scrape the number off
- lxgr 3y agoYou can't dremel it out of the chip, though.
- justinclift 3y agoWell technically you can. The card won't be so usable after that though. ;)
- lxgr 3y agoDestroying the chip is easy, actually chiseling away the correct trapped electrons making up the PAN in the EEPROM is the challenge ;)
- lxgr 3y agoNo, you can most certainly get the card number and expiry via the chip and even over contactless, as it’s a vital part of transaction routing/processing. There are Android apps that can do it.
- jjmarr 3y agoIf I could I'd delete my original comment since I did more research and you're right. https://stackoverflow.com/questions/14861908/apdu-command-to-read-card-number https://stackoverflow.com/questions/14861908/apdu-command-to...