logoalt Hacker News

bediger4000yesterday at 8:55 PM3 repliesview on HN

Some have speculated that the entire credit card system is compromised, end to end. I think the real question is why NSA didn't intervene in the early 1990s. Online commerce was just beginning, and the importance of electronic funds transfer was obvious, but the method wasn't set in stone. NSA knew about public key crypto well before the rest of us did. They could have helped set up very secure electronic payments, but chose not to for unknown reasons.


Replies

lxgryesterday at 11:41 PM

What do you mean by "compromised end to end"? A compromise implies that something isn't working as originally designed.

Credit and debit cards (except for 3DS and EMV) are working exactly as designed; the design just isn't very good from a security perspective.

bagelsyesterday at 9:08 PM

"The RSA algorithm was publicly described in 1977 by Ron Rivest, Adi Shamir, and Leonard Adleman at MIT"

yieldcrvyesterday at 9:01 PM

NSA prefers compromised security so that answers your question

Credit card system was already around for decades before though

show 2 replies