Printed from http://www.electronista.com

Square system shown to be vulnerable to credit card fraud

updated 06:10 pm EDT, Fri August 5, 2011

Security researchers process stolen card numbers

Security researchers have demonstrated two potential vulnerabilities in Square's mobile payment system, which can reportedly be used to process fraudulent transactions. In a demonstration at the Black Hat security conference, Aperture Labs directors Adam Laurie and Zac Franken converted magnetic stripe data into a sound file to trick the Square mobile app into believing a card was being run through the swipe dongle for smartphones.

Custom software enabled the researchers to mimic the beeps of the genuine dongle, however the signal was transmitted to the smartphone using a stereo cable. Although the demonstration used cards that Laurie skimmed himself, the same technique is said to be effective if used with card data sold on the black market.

A second demonstration focuses on Square's dongle, which was used to skim data from a credit card to make a cloned copy. The researchers created code to convert the dongle's been signal into readable card information, as the Square hardware is said to lack encryption or other forms of protection.

Laurie suggests the vulnerability enables users to skim credit cards without any specialized hardware, all while appearing to process a legitimate transaction.

The researchers claim to have confronted Square in February, however the company reportedly dismissed the threat by claiming criminals will gravitate toward easier methods to accomplish credit card fraud. [via CNET]





By Electronista Staff
Post tools:

TAGS :

toggle

Comments

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

Follow us on Facebook

toggle

Most Popular

Advertisement

Recent Reviews

Samsung Galaxy S6 Edge

The Samsung Galaxy S6 range is a critical component in Samsung's flagging smartphone strategy. With sales of its high-end smartphones ...

Notti smart lamp from Witti

Perhaps you've already seen our review of the Dotti LED display from Witti Design. Meet Notti, Dotti's "sibling". Notti is a softball ...

Seagate Personal Cloud (2-Bay)

When it comes to backing up files, many users are now looking to the myriad of cloud storage solutions available. There is no doubt th ...

Advertisement

toggle

Most Commented

 
toggle

Popular News