[ale] OT security not at QT gas pump

Mike Harrison cluon at geeklabs.com
Sat Jul 27 17:48:37 EDT 2013


On Sat, 27 Jul 2013, Ron Frazier (ALE) wrote:
> Had to share this with you.  I go to the QT gas pump.  I swipe the debit 
> card.  The screen says enter your pin number or press no.  So, just like 
> I would if I was a thief, I press no.  The pump asks me to select my 
> fuel grade, which I do.  Then I proceed to fill my tank.  Great 
> security.

On many better systems, you get prompted for a zip code,
as others have said.

Option B: "credit card" rather than "debit card" mode, means the merchant 
pays a higher percentage fee for the less secured mode, both in terms of 
the card transaction and your ability to deny the charge (charge back) 
later. Other logic at play may be a limit ($50 or $75) on that swipe only 
transaction, limiting their exposure. I've had pumps when travelling that 
limited me to a $50 charge as a credit card, but no limit in debit mode.
You notice it when towing a trailer.

What you also may have run into, but probably not notice, is pumps and 
associated systems with camera's. When you swipe the card, they snap a 
shot of you and your car. The really good ones have camera's mounted at 
angles that can snag you/car and license plate and record a still as part 
of the transaction, saved for as long as they have hard drive space. 
You'll notice the ones at big truck stops with the monitors mounted near 
the cashiers, but many of them are not so noticable.

What really keeps ancient credit card technology secure is that -most- 
people are honest, and most dishonest people aren't that bright. What 
keeps me (and the world) paranoid is the few times I've bumped into 
brilliant bad people. They are out there.













More information about the Ale mailing list