Hacker News new | ask | show | jobs
by MBCook 1425 days ago
You only get unencrypted stuff when doing mag-stripe, and that’s mostly just card number and name. Same with tap-to-pay may-stripe emulation (the old way which no one is supposed to use anymore, even in the US per credit card rules).

That’s why everyone has/is moving off mag-stripe (depending on country) and to EMV. With EMV and EMV contactless the terminal never gets the full card number, among many other significant security improvements.

1 comments

>You only get unencrypted stuff when doing mag-stripe

The terminal encrypts it before sending it over the wire