Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Thank you, open source community! (Score 5, Insightful) 40

Thank you for your tireless efforts to make the raspberry pi such a popular and well supported platform! Now that the open source community has done so much of the work for us we plan to capitalize on your efforts and leave you in the gutter. You should have gotten a clue during the parts shortages when we prioritized commercial vendors over getting hardware into the hands of the enthusiasts that made us what we are today.

See you around, schmucks!

Comment Re:Ok,but are these duplicate channels (Score 1) 198

Yeah the US is a little different. For the broadcast networks with local affiliate stations (ABC, CBS, NBC, PBS, Fox, etc.), the cable or satellite provider will generally only provide you with your local affiliate. So if you live in Los Angeles, you will only get the NBC station for Los Angeles, and not for New York or San Francisco.

The cable stations (CNN, ESPN, Discovery Channel, Disney Channel, etc) have just one version. At most they might have two, an East Coast and a West Coast version with the same content, just time shifted by three hours, but normally you'll get just the one appropriate for your geographic location (though not always, Dish Network provides the East Coast feed even in Hawaii).

Comment Re:Oh great, they invented.... (Score 1) 76

The CVV code on the back of the card is actually different than the code on the magnetic stripe. Which is also different than the one in the chip. And I think the CVV in a chip does vary per transaction; if not that, there's something in there that prevents replay of data captured "on the wire" from an EMV transaction.

Passwords exist too. They're called PINs. American banks have mostly shied away from going the Chip and PIN route for credit cards like most other countries, but there are a few out there and PINs have been used with debit cards for a while.

As far as biometric credit cards, those exist too.

Comment Re:standards, use them (Score 1) 206

My understanding is that CVS basically disabled contactless period when Apple Pay came out, supposedly because they were part of the MCX consortium developing CurrenC. I hear sporadic reports that it occasionally works, then breaks a few days later. Apple Pay can do both EMV and MSD contactless; in fact for some reason Amex cards are MSD-only in both Apple and Android Pay, even though their plastic cards with NFC can do both.

I so rarely have a reason to shop at CVS that I haven't had much opportunity to test personally. Other MCX members like Best Buy eventually did turn on Apple Pay.

Comment Re:That's because the payment terminals are outdat (Score 2) 206

Your iPhone doesn't store your actual card number (termed a "Primary Account Number"). When you add your card to Apple Pay, your bank creates a "Mobile Device Number". Your bank keeps the association while your phone uses the MDN to pay, so that's the number the merchant sees. If their systems are later compromised, your bank knows something is wrong if they see the MDN used in a non-Apple Pay transaction.

Apple Pay doesn't require entering the PIN. You can also authenticate using your fingerprint. But since the phone doesn't transmit card details to the terminal until after you authenticate, it's more secure than using an NFC card. A merchant who upgrades their terminals to recognize CDCVM can allow contactless payments in excess of the limit for NFC cards (GBP 30 in the UK, $100 in Australia, etc).

Comment Re:standards, use them (Score 1) 206

They do. The over-the-air protocols in Apple, Android, and Samsung Pay are contactless EMV (a variant on the contact EMV standard for chip cards) and the legacy MSD contactless (basically transmitting magnetic stripe card data over the NFC interface) protocol, which are the same as used for contactless payment cards (Visa PayWave, MasterCard PayPass, American Express Express Pay, Discover Zip). So anywhere that takes contactless payment cards takes Apple/Android/Samsung Pay.

Comment Re:From GRC who brought you ShieldsUp! and SpinRit (Score 1) 31

At the very least, any site using SQRL that cares about security should disallow logins where the SQRL client and browser IP addresses are different.

This actually breaks the original intended mode of operation for SQRL, using a smartphone to scan a QR code and log in on a PC in most cases (it would still work if the PC and the phone are both behind the same NAT device). While this may not necessarily be useful for all people, one of the uses cases for this mode was to allow a safer login on a potentially untrusted machine.

Slashdot Top Deals

The human mind ordinarily operates at only ten percent of its capacity -- the rest is overhead for the operating system.

Working...