tag:blogger.com,1999:blog-6322916946732811685.post8681995119892315039..comments2024-03-29T07:45:22.295-04:00Comments on Borepatch: IMPORTANT SECURITY ALERTBorepatchhttp://www.blogger.com/profile/05029434172945099693noreply@blogger.comBlogger9125tag:blogger.com,1999:blog-6322916946732811685.post-64842421320558300982013-12-21T09:48:53.151-05:002013-12-21T09:48:53.151-05:00People should get fired and Target should reimburs...People should get fired and Target should reimburse credit card companies of costs and holders of cancelled cards for aggravation. Richardhttps://www.blogger.com/profile/13416410052064018322noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-90632717853947139292013-12-19T16:58:57.186-05:002013-12-19T16:58:57.186-05:00More bad news. Looks like they got the credit card...More bad news. Looks like they <a href="http://finance.yahoo.com/news/what-to-do-if-you-shopped-at-target-during-its-data-breach-174829049.html" rel="nofollow">got the credit card security codes</a>, too.<br /><br /><i>"The stolen data include customer names, credit and debit card numbers, card expiration dates <b>and the three-digit security codes located on the backs of cards</b>.</i> [Emphasis mine - Jake]<br /><br />It sounds like the cards they got info on are all essentially <i>completely</i> compromised.Jake (formerly Riposte3)https://www.blogger.com/profile/02976718318892210404noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-5623747178100449542013-12-19T15:02:23.934-05:002013-12-19T15:02:23.934-05:00Something else to be aware of: Most debit cards ca...Something else to be aware of: Most debit cards can also be used as credit cards, without requiring the PIN (I actually don't know my PIN, because I always have the stores run it as credit). If you've shopped at Target during the time in question, it may be a good idea to just get your bank to issue a new card.Jake (formerly Riposte3)https://www.blogger.com/profile/02976718318892210404noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-74598845739411927992013-12-19T14:49:06.632-05:002013-12-19T14:49:06.632-05:00Andrew,
Brian Krebs has a good analysis.
http://...Andrew,<br /><br />Brian Krebs has a good analysis.<br /><br />http://krebsonsecurity.com/2013/12/sources-target-investigating-data-breach/<br /><br />The concern is that the PIN was recorded surreptitiously. Nobody is supposed to store the PIN (other than the issuing bank).Borepatchhttps://www.blogger.com/profile/05029434172945099693noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-71791922760311245282013-12-19T14:08:01.792-05:002013-12-19T14:08:01.792-05:00Is there a linkable source for this? Not doubting...Is there a linkable source for this? Not doubting, just like to read it is all.<br /><br />I never use a debit online. But I regularly do in person. Is this saying that the card#/PIN combination is stored when those POS systems are used? I can't think of a value add to the business for adding storage to that kind of transaction. It's all downsides IFAIK. This hack liability most obviously...Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-7335096468674314752013-12-19T13:50:38.676-05:002013-12-19T13:50:38.676-05:00If you must use a debit card, use one that is link...<i>If you must use a debit card, use one that is linked to an account that isn't your main bill pay account. Transfer money into it as needed.</i><br /><br />^^^^^THIS^^^^^<br /><br />I use a debit card because I was stupid when I was younger and now I can't get a real credit card. But I have a separate account for my bills and my emergency money. If my card is ever compromised (again), I can still pay my bills, and can use my emergency fund for daily necessities until the bank replaces the card and covers the losses (which my bank will do). Jake (formerly Riposte3)https://www.blogger.com/profile/02976718318892210404noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-73515906694565583792013-12-19T13:50:11.683-05:002013-12-19T13:50:11.683-05:00If you must use a debit card, use one that is link...<i>If you must use a debit card, use one that is linked to an account that isn't your main bill pay account. Transfer money into it as needed.</i><br /><br />^^^^^THIS^^^^^<br /><br />I use a debit card because I was stupid when I was younger and now I can't get a real credit card. But I have a separate account for my bills and my emergency money. If my card is ever compromised (again), I can still pay my bills, and can use my emergency fund for daily necessities until the bank replaces the card and covers the losses (which my bank will do). Jake (formerly Riposte3)https://www.blogger.com/profile/02976718318892210404noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-78115561734079591752013-12-19T13:33:48.862-05:002013-12-19T13:33:48.862-05:00Yeah, I used a credit card on-line with them, but ...Yeah, I used a credit card on-line with them, but didn't buy anything at a store with debit. Guess this is a reminder to watch the statements closer.ProudHillbillyhttps://www.blogger.com/profile/14305205710265854978noreply@blogger.comtag:blogger.com,1999:blog-6322916946732811685.post-33762926193250000882013-12-19T11:58:03.661-05:002013-12-19T11:58:03.661-05:00Even smarter:
Don't use debit cards at all.
...Even smarter:<br /><br />Don't use debit cards at all. <br /><br />Use Credit Cards instead and pay 'em off. Worst case? You credit limit is reached and you get it all back when Fraud is proven. An inconveneience at worst. <br /><br />If you must use a debit card, use one that is linked to an account that isn't your main bill pay account. Transfer money into it as needed.<br /><br />That way, even if someone DOES get into that account, the damage is limited. <br /><br />B https://www.blogger.com/profile/10586046436233366155noreply@blogger.com