If they want that much money for a 16gig card they are fucking mental.
Hell, even the 4 gig is stupid. You can get an 8-gig MicroSDHC and reader for 20 bux at Fry's. Yeah it's a little bit bigger, but not much.
GitEmSteveDave_HasAList promoted this comment
Edited by RuBBa_cHiKiN: The real question is can it fit in the Batmobile? at 08/07/09 10:25 PM
RuBBa_cHiKiN: The real question is can it fit in the Batmobile? was starred
RuBBa_cHiKiN: The real question is can it fit in the Batmobile? was unstarred
@RuBBa_cHiKiN: They take SD Cards. There are also USB slots on the side, but I am running Ubuntu off the SD slot, so a slim reader for the USB slots would be welcome.
RuBBa_cHiKiN: The real question is can it fit in the Batmobile? was starred
RuBBa_cHiKiN: The real question is can it fit in the Batmobile? was unstarred
The best solution of this type was Amex's Blue. You got one of their cards and they sent you a smartcard reader. When you wanted to make a purchase, you went to their site, plugged your Blue card into the reader, entered the amount and it generated a one-time credit card number valid for exactly that amount for a limited time, then it expires.
You go back to the site, type in the new credit card number and voila. Secure.
Sadly, Amex discontinued this system.
When all credit and debit cards are chipped, we can use smartcard readers for this and they're VERY cheap (<$20) and far, far more secure than magstripe. But really, the only truely secure system is the one-time credit card number approach because it assumes failure and has a built-in mechanism to limit liability.
BTW, when Verified by Visa came in, they tried to pull a truely horrible fast one on people. The system is a simple PIN verification for web purchases, but they argued that it was SO secure that if any fraud happened, it must be your fault (ie: you gave out your PIN) and so as part of the agreement, you waived your right to challenge purchases.
Thing is, apparently it never occured to them that you can pull a very nice man-in-the-middle and/or a social reroute trick to get the PIN. You put up a fake Verified by Visa display, harvest the PIN and away you go. You still have to enter the credit card number and VVC, so they now have everything to 'be' you.
They finally gave in on this and withdrew the waver.
If Verfied by Visa actually used a chipped card, then it would be (fairly) secure.
Paypal now has a trick that's almost as good. Before you can use it, you have to validate yourself either with a SecureID token or.. and I think this is brilliant.. by having them SMS a 6 digit one time password to your phone. To break this, the crook needs to either hack your IMEI, or intercept an SMS message, or have your phone AND your Paypal password.
Whatever. If you've ever paid for dinner with a credit card, someone somewhere probably has your number.
This is no more or no less dangerous than letting an complete stranger who has a pen and paper in his apron take your credit card to another room for an indeterminate amount of time.
@OMG! Ponies!: The good news is that most people are smart enough to know that if they steal a bunch of numbers from their job and use them all it's going to trace back to their resturaunt because the common link would point back. Granted there's a risk they can decide to take one card and it's yours but it's nothing to lose sleep over. Seriously, people take this stuff too far.
@OMG! Ponies!: Damn dude, now you're making me even more paranoid. What if that person in an apron with pen and paper breathes on my card wrong before handing it to me?
I mean, they could copy my info, wipe the magstrip with their halitosis, AND give me the bacon flu all in one go.
So I think this + PayPal = a merchant solution. Just plug the USB device in, open up a paypal invoice, have your client sit down and slide their cc and voila! Your paid. Pretty cool if it works, which I think it should. Yeah, I'm gonna do that now haha.
@dingus: Actually, this makes it a little easier for you to circumvent PCI regulations...rather than say pay Visa or MC directly AND have to pay for your audits.
@Lite: is on a boat.: Considering that it's a card skimmer that has been reverse engineered for consumer use? I'd say we're actually working backwards on this one.
@Kayonesoft: My guess is that it encrypts the USB traffic and through some browser plugin magic keys data into fields. Presumably the site you're using is SSL'd so the connection from your PC to the retailer is secure. Other card readers behave like keyboards (HID class) and are vulnerable to keyloggers. Keylogging is the easiest and fastest way to steal numbers from PCs with malware.
1) How does the online store read the credit card information if it's been encrypted, scrambled, and coded?
2) Why is it so damned expensive? (For $30.00, I might consider it.)
3) If I'm that nervous about entering my credit card information online, how the hell am I supposed to purchase the SmartSwipe online in the first place?
@92BuickLeSabre: they dont actually tell you how it works or what it actually does on their website, but I assume that it encrypts your info, sends it to their (smartswipe) server then on to the website that youre purchasing from.
@92BuickLeSabre: As for question 3, curiously they have a warning about that on their site:
"Are you interested in purchasing a SmartSwipe? If so, the SmartSwipe Online Shop may be for you. Before you place an order, please familiarize yourself with some of the risks inherrent in online shopping. The SmartSwipe was invented to protect you from these very real, very dangerous threats."
Which is an odd mixed message. Buy our product! Don't buy our product, it's too dangerous!
If I am going to stick my precious into something, it better be designed specifically for it. While I like the 2001 monolith design, unless it just appears out of nowhere when I need it full of stars (or my cards, as the case may be), then I am not certain this is designed for me. Still, it is nice to see SanDisk learning a thing or two from Cupertino - I hope they learn next how to provide Apple-level customer support.
09/29/09
09/29/09
09/29/09
09/29/09
09/29/09
08/08/09
Hell, even the 4 gig is stupid. You can get an 8-gig MicroSDHC and reader for 20 bux at Fry's. Yeah it's a little bit bigger, but not much.
08/08/09
08/31/09
If they were $30 I'd have one by now (I have a Sansa Fuze and have been waiting for them to come in to the $30 range).
08/08/09
08/07/09
08/07/09
08/07/09
I'm retarded and bored sorry haha
08/07/09
08/07/09
Wait a minute, I'm confused now. Do OLPC's take MicroSD cards natively?
08/08/09
08/09/09
07/14/09
You go back to the site, type in the new credit card number and voila. Secure.
Sadly, Amex discontinued this system.
When all credit and debit cards are chipped, we can use smartcard readers for this and they're VERY cheap (<$20) and far, far more secure than magstripe. But really, the only truely secure system is the one-time credit card number approach because it assumes failure and has a built-in mechanism to limit liability.
BTW, when Verified by Visa came in, they tried to pull a truely horrible fast one on people. The system is a simple PIN verification for web purchases, but they argued that it was SO secure that if any fraud happened, it must be your fault (ie: you gave out your PIN) and so as part of the agreement, you waived your right to challenge purchases.
Thing is, apparently it never occured to them that you can pull a very nice man-in-the-middle and/or a social reroute trick to get the PIN. You put up a fake Verified by Visa display, harvest the PIN and away you go. You still have to enter the credit card number and VVC, so they now have everything to 'be' you.
They finally gave in on this and withdrew the waver.
If Verfied by Visa actually used a chipped card, then it would be (fairly) secure.
Paypal now has a trick that's almost as good. Before you can use it, you have to validate yourself either with a SecureID token or.. and I think this is brilliant.. by having them SMS a 6 digit one time password to your phone. To break this, the crook needs to either hack your IMEI, or intercept an SMS message, or have your phone AND your Paypal password.
It's brilliantly simple.
07/14/09
This is no more or no less dangerous than letting an complete stranger who has a pen and paper in his apron take your credit card to another room for an indeterminate amount of time.
07/14/09
07/14/09
I mean, they could copy my info, wipe the magstrip with their halitosis, AND give me the bacon flu all in one go.
What was I thinking?
07/14/09
07/14/09
07/14/09
07/14/09
07/14/09
07/14/09
07/14/09
07/14/09
07/14/09
07/14/09
I mean they claim that it leaves no trace, but obviously the data has to be transmited somehow and that's where the 'hackers' will be looking.
07/14/09
07/14/09
1) How does the online store read the credit card information if it's been encrypted, scrambled, and coded?
2) Why is it so damned expensive? (For $30.00, I might consider it.)
3) If I'm that nervous about entering my credit card information online, how the hell am I supposed to purchase the SmartSwipe online in the first place?
07/14/09
I'd also be worried someone can spoof my credit card information. Some way some how I feel there could be a flaw using this method.
07/14/09
07/14/09
07/14/09
07/14/09
"Are you interested in purchasing a SmartSwipe? If so, the SmartSwipe Online Shop may be for you. Before you place an order, please familiarize yourself with some of the risks inherrent in online shopping. The SmartSwipe was invented to protect you from these very real, very dangerous threats."
Which is an odd mixed message. Buy our product! Don't buy our product, it's too dangerous!
07/14/09
I think I'm convinced. The SmartSwipe is simply too dangerous for me to purchase at this time.
02/25/09