How do Chip Cards Work?

Techquickie ·Techquickie ·2017-05-06 · 999 words · ~4 min read
Floatplane YouTube

Transcript

JSON SRT VTT 74
0:00 it wasn't too long ago that we were mostly paying for things by swiping our
0:04 credit cards as furiously as you'd swipe toilet paper after eating that spicy
0:09 burrito special yeah but the venerable
0:12 magnetic stripe is being phased out in favor of EMV chips which have become
0:17 quite common in most of the world over the past few years but are just now
0:21 catching on with our friends in the United States but why are we ditching
0:25 the magstripe in the first place unsurprisingly one reason is security
0:31 mag Stripes Store data like card numbers and expiration dates in an unsecure
0:36 manner meaning bad guys can steal the information quite easily in a variety of
0:42 ways for example if you're somewhere like an ATM or gas station that only
0:46 accepts mag stripe cards visually
0:49 inspect the card reading equipment and give it a little jiggle to see if it's
0:53 loose if something seems not quite right
0:57 it's possible that someone has installed an inexpensive car skimmer which reads
1:01 your card as you insert it into the slot and transmits the information to a
1:05 nearby criminal who can then use your card number to at best waste your money
1:11 and at worst make super suspicious purchases that could land you on some
1:16 kind of fbii watch list and more skilled
1:19 hackers can even sneak malware onto retail systems that's a lot more
1:23 difficult to detect this is what happened in the US recently when tens of
1:27 millions of customers had their data stolen when cyber criminals planted
1:32 malware in the payment systems of the retail giant Target so how then do chip
1:37 cards prevent these types of breaches well they use a form of public key
1:42 cryptography you can learn more about that in general in this video but here's
1:47 what happens specifically each time you insert your chip card into a reader the
1:51 card generates a random code that's good for that transaction only depending on
1:57 how exactly the encryption is implemented the terminal can use
2:00 encryption keys to decrypt your account information and authorize this
2:04 transaction even if it can't communicate with your credit card company unlike
2:09 magstrip cards which always had to do this to process a transaction since each
2:14 code is onetime use only it's totally useless to an attacker that intercepts
2:18 it and if your card gets stolen it's extremely difficult for someone to clone
2:23 the chip as opposed to magstripe cards which spit out your information as
2:27 readily as a participant in a Watermill eating contest spits out
2:31 seeds that visual aside many systems also now require the use of a pin or
2:36 personal identification number so even if a thief tries to use your original
2:41 card instead of cloning it the transaction won't be authorized unless
2:45 they know your PIN a better solution than the old authentication method that
2:50 only involved signing a receipt of course EMV chip cards are not foolproof
2:55 aside from the constant arms race between financial institutions and black
3:00 hats who try to crack their security there's also the backwards compatibility
3:04 purposes of your card I mean many chip cards still have a MAG stripe which are
3:09 just as vulnerable as ever and the chip doesn't do much to stop fraud in
3:14 situations where someone can just enter a card number such as pretty much all
3:19 online stores that have online shopping that being said it's still better than
3:23 what we used to have but until we have James Bond style biometric scanning at
3:28 every gas station and 7 11 in the freaking world keep your card close and
3:33 think twice before using it at a shady Merchant you don't want to have your
3:37 credit card limit maxed out by some dude who promises you an official lonus
3:43 action figure with hot swappable sandals and a little version of the LT sweater
3:47 after he says all you have to do is put your credit card information into the
3:51 message box like I did I'm still waiting
3:54 Jacob where's my action figure anyways
3:58 here's the sponsor spot but unlike Jacob's scammy website you
4:02 could make a beautiful wonderful well-respected website using Squarespace
4:08 it's 12 bucks a month and you get a domain included if you buy it for a year
4:11 and they have 24/7 live chat and email support they also have responsive design
4:16 so if someone views it on a phone or a tablet or a desktop or a different phone
4:20 or an even more different phone or a console or an even more different phone
4:25 it will work on all of them and they have stuff like cover pages so you can
4:29 have one of those those single pages that you just scroll through the entire
4:32 thing instead of having multiple Pages which is Linus's favorite thing he
4:37 absolutely loves those and there's also Apple pay if you're running a
4:41 Squarespace store so if you want to have a secure way for people to be able to
4:46 buy your stuff you could enable Apple pay which is fantastic start a trial
4:50 with no credit card required and start building your website today and when you
4:55 do decide to sign up for Squarespace make sure you use offer code Tech
4:58 quickie to get 10% off your first purchase if you guys like this video
5:03 like it if you disliked it dislike it leave us a comment down below letting us
5:07 know if you have any video suggestions for future Techquickie episodes also
5:11 check out channel superf fun I have no idea what's happening over there I think
5:16 I've been in one episode in the last like half a year so um it's hilarious
5:21 though I still watch it every Wednesday like clockwork I just want more episodes
5:27 over there hopefully we can figure that out eventually anyways bye I