Profile picture
Matthew Green @matthew_d_green
, 4 tweets, 1 min read Read on Twitter
This report on EMV credit card is great. TL;DR all the credit cards are still being stolen, even now that we have chip cards. Some of this is due to e-commerce fraud, but tons is still coming from card-present transactions. geminiadvisory.io/card-fraud-on-…
There are parts of this that make EMV look bonkers terrible and/or just don’t make sense. Like this paragraph about “shimming” cards.
So first off, *why* are cards sending track data from the chip, such that the same data can be printed to a mag stripe and used for payments? That’s nuts! What idiot thought that was a good idea?
Second, why do shimmers only work when the payment card issuer ignores the dynamic CV2? I cannot figure out what’s going on there and I really want to know.
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Matthew Green
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @matthew_d_green see all

Profile picture
The Facebook stablecoin (if it works, scales, gets deployed and adopted by non-Facebook companies, doesn’t get regulated into dust) is going to be a massive game-changer for the financial services industry. Fight me.
Hell, even if Facebook is able to make a credible run at deploying the thing, it will give them huge leverage with their banking relationships. No more closed (to FB) instant networks like Zelle, reduced transaction fees, etc.
Summary of the comments: (1) a bunch of people seem to think asset-backed stablecoins won’t be allowed by regulators, or that people won’t use/trust them. That horse has already bolted. google.com/amp/s/www.coin…
Read 5 tweets
Profile picture
The theory, for what it’s worth, was that the big brand name services would behave better than the fly-by-night shady data brokers. Much as CVS is perceived as less likely to put Fentanyl into your medicine than, say, the drug dealer on the corner.
The sole redeeming feature of the centralization of the web was supposed to be improved data handling. Better security and oversight of partners (like ad networks etc.) Instead we got Facebook treating your data the way a teenager treats a house when the parents go out of town.
The Facebooks and Googles would do this voluntarily, in part because it’s smart business — don’t give away the store. But mostly because it’s way easier for governments to target them with punitive regulations.
Read 4 tweets
Profile picture
@LargeCardinal The group messaging mechanism is very different. In Signal (app) group messages are layered on top of the existing pairwise messaging system. To add a new user, you (an existing user) have to send encrypted control messages to each existing user. The server can’t do this.
@LargeCardinal In fact, the Signal server doesn’t even know what a group message is. As far as it’s concerned, when I send a message to a group of N people, it just looks like I’m sending a bunch of pairwise messages at the same time.
@LargeCardinal In WhatsApp (as of a few months ago) the server knows what group messages are. It actually sends special control (add/remove) requests to the members of the group, and it handles multiplexing group messages to all of the other users.
Read 4 tweets

Related threads

Profile picture
Okay.

Here’s a thread on some of the highlights from the 43 paged Wee Tracker report on Venture Capital funding in Africa over the last year.

Interesting numbers so far.
The year saw a record of USD 725.6 million injected and it is the highest ever injected into the African Ecosystem.

Cc @scalemyhustle
Now another thing I found interesting was - a huge chunk of that money is neither equity nor debt financing. It is, you guessed it - grant money.

A whooping 42.5% of that sum was grant/prize money.

This is good and bad news.
Read 13 tweets
Profile picture
Based on @TeslaCharts research on $TSLA registration delays, I've outlined what is the most obvious explanation for a sizable portion of these delays

Having 2 dealer friends that did the same #fraud & were caught, Its the same scam just @ a much larger scale
#ExplainTheVINs
How it works for dealers:

Credit line (flooring) secured by cars @ 85% of value, 15% cash by dealer
Inventory must be in known location so it can be audited by lender. Lender is putting up $, needs to know where their collateral is.
Dealers have lots, also off site locations, but those don't change and are known by the flooring co

When car is sold, $ is received, Car is given to to new buyer with temp tags, the new owner leaves the lot.
Read 14 tweets
Profile picture
Ramble/notes thread on OmniOS. Will likely span a little bit now and more tomorrow.
First off, as we all know, ASCII art is the mark of a discerning OS, and OmniOS CE knocks it out of the park with this kickass bootloader splash.
Installer is all pretty ascii boxes and colors. Nothing much to say about the install itself, it's uneventful and pleasant, and asks about a third of the questions of today's linux distros. What language, which disks for ZFS, timezone plz, done thx.
Read 36 tweets
Profile picture
📢#RETWEET 📢
🚨#Breaking 🚨

Barack Hussein Obama’s 2008 campaign was fined $375,000 by Federal Election Commission for campaign reporting violations — one of largest fees ever levied against presidential campaign

Why was this Hidden from #WeThePeople?
👇This Thread explains👇
📢#RETWEET 📢
(2)Barack Hussein Obama fine — laid out in FEC documents that have — arose from an audit of campaign, which was published in April. Which was sent to Sean Cairncross, chief lawyer for RNC, one of groups that filed complaints about campaign’s FEC reporting from 2008
📢#RETWEET 📢
(3)“$375,000 is huge fine,” said Republican election lawyer Jason Torchinsky. “It may be one of their top five- or 10-largest fines”

But he added, “They’re also the first billion-dollar presidential campaign. Proportionally, it’s not out of line”
#DeepStateinPanic
Read 131 tweets
Profile picture
1/ Long Reads Sunday #5. Crypto was a pile of fire 🔥🔥🔥 this week. Ponzi schemes; ETF drama; skeptics-turned-Bitcoin-Maximalists (sort of); a ritualistic dance around the pyre of the firm structure; debates about VC token sale disclosures and so much more. Let’s dig in 👇
2/ First, the big industry background stuff. @AutonoFinTech produced a massive report on the state of the industry. @cburniske grabbed some of the most interesting slides, including this one on the waves of crypto funding
3/ @Coindesk also released its big Q2 report, that, alongside all the numbers you’d expect, also provides a bunch of data about the composition of the crypto community in terms of things like political affiliation coindesk.com/research/state…
Read 26 tweets
Profile picture
So, it's about time I finally did it. Join me as I play Thief: The Dark Project; I've never got further than The Sword before. Thanks to the No Spiders mod from @adurdin I hope to actually finish it this time. #ThiefTDP
I'll be playing Thief Gold. I have multiple copies of The Dark Project but they'd require me to dig through boxes to find. Thief Gold is the only one reliably available online. I am reserving the right to level skip past the Thieves Guild, though. #ThiefTDP
I'll be using the New Dark version, but sticking to a 4:3 aspect ratio. #ThiefTDP
Read 639 tweets

Trending hashtags

#MNDFL #IA #Gaza #TNBJP #IaDems #SGF #Soros #bitcoin #CoinbaseTrust #stablecoin #hindu #Fraud #ChildAbusing #AWSLambda #Ethereum #FastAndFurious #IDEX #Dash #Clinton #TrumpRussia #ialegis #FraudMinute #Mueller #serverless #Treason

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!