Reply to post: Re: And when the payment is actually sought?

You can't always trust those mobile payment gadgets as far as you can throw them – bugs found by infosec duo

Anonymous Coward
Anonymous Coward

Re: And when the payment is actually sought?

Could be - but the example in the photo shows "The card reader says £1.00, but the payment app will bill the customer £1.23". Of course, if the "two terminals that can be sent arbitrary commands to change what's displayed on their screens" actually allow a different amount to be displayed and presented to the card, then that's another matter. It's not clear from the article whether this is possible; 'proper' terminals generally restrict the display at sensitive points in the transaction process.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2019