SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Technology Stocks : Frank Coluccio Technology Forum - ASAP

 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext  
To: jmhollen who wrote (482)11/26/1999 12:19:00 AM
From: ftth   of 1782
 
Thanks for the clarifications John.
A couple questions:

re:<<Debit cards use a hardware-entered PIN code, and DES encryption technology, per my understanding; and operate on a different system from the VISA/M-C system>>

By "hardware entered" do you mean a keypad on this device that sits between the keyboard and the PC? The vulnerable point I see here is the link from the "box" to the pc. What's to stop someone from installing an agent on your computer that copies the bitstream out of the "box", sends it to someone without your knowing it, and they just run the bitstream into their software anytime they want to do a transaction. I'm sure they have this angle covered, so it's probably not a "real" vulnerability, but I'm curious as to the method they use since there are several ways.

Can you get a bit more detail from your sources re: <<use ... DES encryption technology...>

DES (single-DES anyway) is no longer considered secure for financial transactions. If, however, this is wrapped inside SSL that's a different story.

My last question: V-M/C use private networks for transaction processing for the most part, if I'm not mistaken. There are all sorts of arguments--pro and con-- for maintaining this structure. Your system is using "the internet," correct? If so, how are the increased number of possible failure points addressed to customers and what are the backup systems in case an internet connection can 't be had due to an outage or whatever other reason.

dh
Report TOU ViolationShare This Post
 Public ReplyPrvt ReplyMark as Last ReadFilePrevious 10Next 10PreviousNext