3 ms·

https://docs.google.com/viewer?embedded=true&url=http://www.onlinetvportal.hu/papers/04Bucsay_Balazs-Hacktivity2012-PayPass_vulnerabilities.pdf https://docs.goo

https://docs.google.com/viewer?embedded=true&url=http://www.onlinetvportal.hu/papers/04Bucsay_Balazs-Hacktivity2012-PayPass_vulnerabilities.pdf https://docs.google.com/viewer?embedded=true&url=http://... On p 27, there is reference to merchants not needing to support CVV3. (The good stuff starts on p 20.)

jrockway 14y ago
He's talking about merchants that don't ask for any CVV, just a card number, zip code, and expiry. I've certainly successfully bought stuff with only that information, but it's not exactly common. (And I'm guessing when you call up to dispute a charge, the lack of a CVV makes it easier.)