Tuesday, August 28, 2018

Credit Card Skimmers and You

Having had our debit cards compromised 3 different times, I've become concerned about how evil actors have gotten the information. I've come to assume that it's been through normal usage during which we've been skimmed, either through compromised ATMs or gas pumps.

First off, that this is even a situation that occurs enough that we should be concerned p!$$3$ me off. Second, I'm tired of being the victim. Third, I wonder, given our credit/debit card dependency these days if we'll ever be able to find a place free of this garbage.

So, given the seeming helplessness of the situation, I decided to be helpless and educated rather than helpless and oblivious.

Here are some resources I've found:

Texas Department of Agriculture Commissioner Sid Miller's Video
This is good information, but incomplete. Just scanning for weird Bluetooth devices will return a wealth of hits in a busy metro area, whether or not you are at or near a gas station. Good info, but ultimately only feeds paranoia.

Gas Pump Skimmer Information
SparkFun, the developers of the Android-compatible "Skimmer Scanner", talk about the most common skimmer type. They reverse-engineered skimmers received from law enforcement and used this information to create "Skimmer Scanner". I feel like the effectiveness of "Skimmer Scanner" will be short-lived, if it's not already obsolete. Thieves and evil actors are tireless in developing their dark arts and are always ahead of those who desire to thwart their efforts.

2018 SXSW Presentation by Nick Poole, SparkFun Electronics
Good presentation by one of the guys that reverse-engineered the skimmers (see above). Pretty geek-heavy in tech details, but if you want to skip to 42:06, that's where the useful facts crop up.

Credit Card Shimmers: Next Generation up from Skimmers 
As I mentioned above, the Dark Side never sleeps. This device is hard to detect and serves the same nefarious purpose as the skimmer, but takes advantage of so-called higher security chipped cards.

There's much more information about this stuff, but I've gotten too depressed reading and listening to it. I need a break.