Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#297203 - 18/04/2007 02:46 Dradt - My credit card has been pwned
gbeer
carpal tunnel

Registered: 17/12/2000
Posts: 2665
Loc: Manteca, California
Well, it was caught early by the CC company. Amazing how quickly they zeroed the account on the basis of two, out of the ordinary, for me, charges.

Both charges were denied as suspect even before I was contacted.

No damage to me, except waiting for the new card to arrive.
_________________________
Glenn

Top
#297204 - 18/04/2007 11:07 Re: Dradt - My credit card has been pwned [Re: gbeer]
Folsom
member

Registered: 12/08/2001
Posts: 175
Loc: Atlanta
Funny, that just happened to me on Saturday. The fraud department called me up to see if charged $2700 at 7am Friday morning. What tipped them off is that the expiration date was wrong.

Top
#297205 - 18/04/2007 12:50 Re: Dradt - My credit card has been pwned [Re: Folsom]
boxer
pooh-bah

Registered: 16/04/2002
Posts: 2011
Loc: Yorkshire UK
My wife got hers actually nicked in Spain, last year, we had all her cards stopped by CC Sentinel within half an hour The only charges they ran up and didn't stop were tolls on motorways and tickets on the Barcelona underground: The ticket machines don't require a pin, nor, obviously, a signature or any other identification. They just refuse them and the ticket vendor pays the cost.
_________________________
Politics and Ideology: Not my bag

Top
#297206 - 18/04/2007 16:41 Re: Dradt - My credit card has been pwned [Re: gbeer]
siberia37
old hand

Registered: 09/01/2002
Posts: 702
Loc: Tacoma,WA
Had my pwned a few years back too. No explanation or idea of how it could happened. Someone just started ordering digital cameras to a Florida address one day (I have never lived in FL). Makes you wonder how secure your money really is these days.

Top
#297207 - 18/04/2007 16:48 Re: Dradt - My credit card has been pwned [Re: siberia37]
tfabris
carpal tunnel

Registered: 20/12/1999
Posts: 31600
Loc: Seattle, WA
Interesting, when mine got pwnd, one of the charges was from Florida as well. Wonder if there's a connection?

Here's my guess as to how it happened: I frequently give my credit card to restaurant employees without a second thought. I trust them to use it to just pay for my meal, and not steal its data and offer it up for sale on an IRC channel. Clearly this trust is misplaced.

Another possibility is that some credit card receipt printers won't "X" out the full credit card number, and someone dumpster-dived. Another possibility is that someone got the number from an old-style carbon receipt (once in a blue moon I make purchases that involve those kinds of receipts).

In any case, the convenience of being able to pay via those methods, combined with the swift and painless way that the banks will correct these kinds of things, makes it worth it for me to continue my purchasing habits unchanged, even though I know I'm gonna get pwnd again.
_________________________
Tony Fabris

Top
#297208 - 18/04/2007 17:58 Re: Dradt - My credit card has been pwned [Re: tfabris]
Dignan
carpal tunnel

Registered: 08/03/2000
Posts: 12341
Loc: Sterling, VA
Quote:
Here's my guess as to how it happened: I frequently give my credit card to restaurant employees without a second thought. I trust them to use it to just pay for my meal, and not steal its data and offer it up for sale on an IRC channel. Clearly this trust is misplaced.

And your solution? I've heard of people walking with their servers to watch them ring up their bill. I think that's ridiculous.

Besides, if any proper investigation were made into your charges, they could probably tell when the illegal activity started, and track down which restaurant and server it was. Heck, I wonder if the CC companies are smart enough to single out a particular store if their customers seem to have their numbers stolen after shopping there.

I've had my number stolen a couple times. The last time I seemed to get someone who was new to the idea. They signed up for an online dating service, and ordered some beauty supplies and children's reading material, but they had the products shipped to the billing address. I don't know why you'd even bother going through with the purchases. It seems like a big waste of time for the theif.
_________________________
Matt

Top
#297209 - 18/04/2007 18:38 Re: Dradt - My credit card has been pwned [Re: Dignan]
Ezekiel
pooh-bah

Registered: 25/08/2000
Posts: 2413
Loc: NH USA
Quote:
Heck, I wonder if the CC companies are smart enough to single out a particular store if their customers seem to have their numbers stolen after shopping there.


Yes, they are. A Chinese restaurant near was investigated (and busted) several times for just such fraud - both times the investigation was initiated by the credit card companies.

-Zeke


Edited by Ezekiel (19/04/2007 10:42)
_________________________
WWFSMD?

Top
#297210 - 18/04/2007 19:05 Re: Dradt - My credit card has been pwned [Re: Dignan]
mlord
carpal tunnel

Registered: 29/08/2000
Posts: 14496
Loc: Canada
Quote:
Quote:
Here's my guess as to how it happened: I frequently give my credit card to restaurant employees without a second thought. I trust them to use it to just pay for my meal, and not steal its data and offer it up for sale on an IRC channel. Clearly this trust is misplaced.

And your solution? I've heard of people walking with their servers to watch them ring up their bill. I think that's ridiculous.


While we were in the U.K. last fall, *every* restaurant we went to used wireless credit-card readers that were brought to the table, so that we never had to hand over the card. It seemed like some new law or standard required them to do it that way.

Cheers

Top
#297211 - 18/04/2007 19:08 Re: Dradt - My credit card has been pwned [Re: Dignan]
tfabris
carpal tunnel

Registered: 20/12/1999
Posts: 31600
Loc: Seattle, WA
Quote:
And your solution?


None. I just accept this as a side effect of the convenience of paying this way. Note that I've used debit and credit cards this way for many years and only had it happen once.

Quote:
Besides, if any proper investigation were made into your charges, they could probably tell when the illegal activity started, and track down which restaurant and server it was.


Key phrase being the "if" clause, there.
_________________________
Tony Fabris

Top
#297212 - 18/04/2007 20:26 Re: Dradt - My credit card has been pwned [Re: mlord]
andy
carpal tunnel

Registered: 10/06/1999
Posts: 5916
Loc: Wivenhoe, Essex, UK
Quote:
It seemed like some new law or standard required them to do it that way.


That would be Chip and PIN. UK issued cards now have a chip in them and when you use them for most purchases you have to enter your PIN, hence the need to bring the card terminal to you and therefore the sudden rise in wireless card terminals in the UK.

There is a downside to this though, in the past the only time the bad guys got a chance to peek at your PIN was at the ATM. Now they can do it in shops, restaurants etc as well.

Apparently the chip system isn't as secure as they made out at first. When the card terminals are in offline mode, i.e. when handling a small purchase say under £50, they pass the PIN to the card in plaintext, meaning it in theory possible with a compromised terminal to snoop the PIN. The same issue also means it is possible to clone the card once you have the PIN as long as the cloned card is also only used in terminals operating in offline mode.
_________________________
Remind me to change my signature to something more interesting someday

Top
#297213 - 19/04/2007 11:35 Re: Dradt - My credit card has been pwned [Re: Ezekiel]
Folsom
member

Registered: 12/08/2001
Posts: 175
Loc: Atlanta
Quote:
Yes, they are. A Chinese restaurant near was investigated (and busted) several times for just such fraud - both times the investigation was initiated by the credit card companies.


Before Newegg got popular I used to go to a local computer shop, and you had to pay in cash otherwise the employees would steal your credit card number. A couple of my friends had theirs stolen, but neither the cops nor the credit card company ever went after the shop.

Top
#297214 - 19/04/2007 11:48 Re: Dradt - My credit card has been pwned [Re: Folsom]
Roger
carpal tunnel

Registered: 18/01/2000
Posts: 5683
Loc: London, UK
Quote:
otherwise the employees would steal your credit card number.


Did you consider telling the manager? Or shopping somewhere else?
_________________________
-- roger

Top
#297215 - 19/04/2007 11:58 Re: Dradt - My credit card has been pwned [Re: tfabris]
Tim
veteran

Registered: 25/04/2000
Posts: 1529
Loc: Arizona
Quote:
I frequently give my credit card to restaurant employees without a second thought. I trust them to use it to just pay for my meal, and not steal its data and offer it up for sale on an IRC channel. Clearly this trust is misplaced.


I've always been leery about giving my credit card to anybody, and usually just use cash. The usual times I use a credit card are when making big purchases, and that is usually at a counter where I can watch the swiping, or over the net where there are all kinds of fraud protection things in place by my credit card companies.

I just find cash easier, faster, and less likely to be stolen by anybody but a mugger

Top
#297216 - 19/04/2007 12:29 Re: Dradt - My credit card has been pwned [Re: Roger]
Folsom
member

Registered: 12/08/2001
Posts: 175
Loc: Atlanta
Quote:
Did you consider telling the manager? Or shopping somewhere else?

We stopped shopping there a long time ago. I don't even know if they are still in business. All this happened back in 1998, and this shop was the only local shop to get inexpensive parts.

Top