[Cryptography] French credit card has time-varying PIN

Peter Gutmann pgut001 at cs.auckland.ac.nz
Tue Oct 4 06:40:02 EDT 2016


Ron Garret <ron at flownet.com> writes:

>No, it just means you have a one-hour window between phishing the CVV and
>using it.

Half an hour on average, not a full hour.  In any case it pretty much kills
phishing, because the ecosystem requires a matter of some days between the
card being phished and cashed out.

Peter.


More information about the cryptography mailing list