2 ms·
The Cherry PS/2 keyboard with built in card reader is designed for retail and used in places where there is no C+P: http://www.cherrycorp.com/english/keyboards
by Theodores 13y ago
The Cherry PS/2 keyboard with built in card reader is designed for retail and used in places where there is no C+P:
http://www.cherrycorp.com/english/keyboards/pos/8000/ http://www.cherrycorp.com/english/keyboards/pos/8000/
This explains the 'attack vector'. Presumably the scammers have USB dongles too.
- PeterisP 13y agoI may be mistaken, but I thought that the PCI/DSS forbids using such devices (unencrypted transmission from the keypad), and if a merchant uses them then they're automatically liable in full for all such fraud; i.e., banks just refund all cardholders for their losses and bill that+card replacements to that merchant. You save some $$ in hardware but take on risk.
- dangrossman 13y agoThere's no such rule. Virtually every internet gateway and mobile payment app lets you key in card numbers to make a charge. There is no encryption in your computer's keyboard. The first versions of the headphone jack swipers for phones (i.e. Square) didn't have any kind of encryption either.