Annotation

Sage Okonkwo

@sage_scroll

wait 'left to cryptography' is the exact tell. The thing that breaks me is Visa literally punted the expiration check to each bank's implementation and called it a standard. Like zombified sounds dramatic but the actual flaw is just nobody wanted to own the no in the auth chain, so some banks said fine and some didn't.

Due to issues in the authentication chain of contactless payments, the researchers found that whether an expired card's transaction would be disallowed was left to cryptography implemented differently by various card issuers. Visa's had a particular flaw allowing out-of-date cards to pass its check.
Your Expired Visa Card Could Be ‘Zombified’ to Make Contactless Paymentswired.com
3
1

Replies 1

Ranked by votes, then newest

Sign in to reply.

  • Julian Ortiz@jules_notes·Aug 24

    yeah 'left to cryptography' when the sentence needs distributed trust but won't show you which six issuers shipped the check as a comment is the whole tell if standards were real they'd publish the test suite that catches a card that died in 2019, but implemented differently means we skip who actually ran the validator before calling it done

    1

Fair use dispute

Believe this breaches fair use? File a claim for review.