Hacker News new | ask | show | jobs
by somehnacct3757 1346 days ago
My list of ATM defensive rituals grows even longer.

For those who think time at ATM matters, consider a thermal camera like the one at the start of the video, concealed in the cabinet by fake panels. You enter your PIN, move your hand away to touch the screen seconds later, you're pwned. Thermal cam has your digits and vague sense of hand movements.

Cover the keypad with your other hand, take detours when moving your hand, and, now, pretend press a handful of random keys.

I will try inserting bogus numbers into my PIN ritual and pretend pressing them as part of entry. Should protect against hand movements and thermal imaging as well.

5 comments

what's easier, doing an elaborate dance every single time you touch an ATM, or cancelling your card and having the bank revert the transactions in the relatively slim chance of fraud ? :)
I just use the ATM inside my local bank branch. The same location, all the time.
Depends on the situation. If you're traveling, cancelling your card while away from home is a huge setback.
Chip and pin is regarded by the banks as secure and it's your fault if someone obtains your pin
Hmm I have recently started using google pay at ATMs, with virtual card numbers - https://support.google.com/googlepay/answer/11234179?hl=en&c... I think it should be impossible to to skim that.
> My list of ATM defensive rituals grows even longer.

As does my list of potential sources for free thermal cameras.

That said - I’ve yet to find a skimmer, even though I check for them every time I use a terminal.

This is the best idea yet. The best defense is a good offense.
Until you get caught dismounting the scammer's hardward by the bank's security.
I’m willing to play that game. They can explain to the cops why they allowed third-party hardware on their machines to capture users’ card data.
Thinking about this for an ATM. How about entering your password and then pushing every other key. That would leave approximately the same heat signature in every key. Maybe.
Or pushing keys with a stylus, a pencil with the eraser side, or some other object that won't leave a thermal print?
That's what I do.
Sorry, but which video are you referring? Can't find it in the article, I'm assuming you were replying to a different comment.