Hacker News new | ask | show | jobs
by thetwentyone 1070 days ago
Since it's only implied how it works and there seems to be some confusion in the comments. It seems like the technique is to simply create a very form-fitting insert which won't fit properly if some device is overlaid onto the machine. The insert is not left in the device, but is just used for a quick in-and-out check.
3 comments

Basically a Go/No-Go gauge for a payment terminal.
> Since it's only implied how it works and there seems to be some confusion in the comments.

Seems like a lot of TLDR; :)

The article says exactly how it works.

> The usage is very simple: Insert the tool into the payment terminal’s chip card slot. If it can insert fully, the terminal is safe. If it gets stopped, there might be a skimmer!

And it is patented..
This is a good thing, some troll could patent it and then deny anyone else the right to use it.
Wouldn't an attempt to do that fail the prior art test?
Why even risk it? Just get the patent and license it for free.
But also, freely licensed.
Only for large retailers, though. Why not directly offer the CAD file for download right on that page, or make the resulting product available for purchase?
Likely to avoid defeat attempts. The corporate email requirement acts as a first-line defense to at least try to stave-off would be skimmers / scammers grabbing the CAD file and working out the measurements needed to defeat it.
Seems easier to just pay off an underpaid Target employee.
ah, nothing like security through obscurity!
Which should not be your entire strategy but is completely valid layer of mitigation
Sure is. Good thing criminals are too dumb to find it, and especially too dumb to replicate it. I'm sure they will never be able to modify their skimmers to circumvent it. They will rue the day they messed with Target's IP lawyers!!! https://patents.google.com/patent/US11507762B2/