Skip to main content

Credit card processor VeriFone challenges Square

Image used with permission by copyright holder

Credit card processor VeriFone has released an open letter to both consumers and the card processing industry claiming that an smartphone-based credit card reader being marketed by start-up Square is plagued by a “serious security flaw” that puts users’ data at risk. According to VeriFone, the problem lies in the Square card reader dongle that connects to an iPhone, iPad, or Android device’s headphone connector: the dongle reads information off the card’s magnetic strip and sends it to the device unencrypted. The result, according to VeriFone, is that anyone could write a bogus skimming application that collected card information off the Square card reader, and experts could do it from scratch in under an hour. How do they know? They did it.

“In less than an hour, any reasonably skilled programmer can write an application that will “skim”—or steal—a consumer’s financial and personal information right off the card utilizing an easily obtained Square card reader,” VeriFone’s CEO Douglas G. Bergeron wrote in the latter. “How do we know? We did it. Tested on sample Square card readers with our own personal credit cards, we wrote an application in less than an hour that did exactly this.”

The idea behind Square is to enable anyone to accept payments using credit cards using just an smartphone, the Square dongle reader, and Square’s software—of course, users will also need to have a verified, non-prepaid bank account to accept credit card payments. However, VeriFone’s argument is that because the data read off the card is transmitted to the device unencrypted, anyone could write a bogus “Square” application and use it to skim credit card information from unsuspecting credit card users.

VeriFone is demanding Square recall all its card-reading devices, and notes it is handing its application over to the likes of Visa, MasterCard, Discover, American Express, and JP Morgan chase for their examination, urging them to stop accepting payments processed via Square. “If the industry allows Square and other similar attempts to short-circuit security best practices, it will seriously jeopardize the integrity and security of the payment infrastructure and financial systems developed over the last three decades.”

Industry watchers have generally greeted VeriFone’s accusations and open letter with a healthy degree of skepticism. Some have accused VeriFone of having a blatant conflict of interest, since Square’s business model directly undercuts VeriFone’s own business for expensive credit card readers. In that context, VeriFone’s open letter can be viewed an attempt to spread fear, uncertainty, and doubt (FUD) about a competitor’s product. Others have noted that, with the exception of a CVV1 number, the data on a credit card’s magnetic strip is exactly the same as the information printed on the credit card itself: skimmers need only take a decent picture of a credit card in order to “skim” the data off it—and they might get the user’s legal signature too.

[Updated 09-Mar-2011: Original text stated Square operated only with merchant accounts.]

Editors' Recommendations

Geoff Duncan
Former Digital Trends Contributor
Geoff Duncan writes, programs, edits, plays music, and delights in making software misbehave. He's probably the only member…
Meet the game-changing pitching robot that can perfectly mimic any human throw
baseball hitter swings and misses

Who’s your favorite baseball pitcher? Shane McClanahan? Sandy Alcantara? Justin Verlander? Whoever you said, two of the top sports-tech companies in the U.S. -- Rapsodo and Trajekt Sports -- have teamed up to build a robot version of them, and the results are reportedly uncannily accurate.

Okay, so we’re not talking about walking-talking-pitching standalone robots, as great a sci-fi-tinged MLB ad as that would be. However, Rapsodo and Trajekt have combined their considerable powers to throw a slew of different technologies at the problem of building a machine that's able to accurately simulate the pitching style of whichever player you want to practice batting against -- and they may just have pulled it off, too.

Read more
The best portable power stations
EcoFlow DELTA 2 on table at campsite for quick charging.

Affordable and efficient portable power is a necessity these days, keeping our electronic devices operational while on the go. But there are literally dozens of options to choose from, making it abundantly difficult to decide which mobile charging solution is best for you. We've sorted through countless portable power options and came up with six of the best portable power stations to keep your smartphones, tablets, laptops, and other gadgets functioning while living off the grid.
The best overall: Jackery Explorer 1000

Jackery has been a mainstay in the portable power market for several years, and today, the company continues to set the standard. With three AC outlets, two USB-A, and two USB-C plugs, you'll have plenty of options for keeping your gadgets charged.

Read more
CES 2023: HD Hyundai’s Avikus is an A.I. for autonomous boat and marine navigation
Demonstration of NeuBoat level 2 autonomous navigation system at the Fort Lauderdale International Boat Show

This content was produced in partnership with HD Hyundai.
Autonomous vehicle navigation technology is certainly nothing new and has been in the works for the better part of a decade at this point. But one of the most common forms we see and hear about is the type used to control steering in road-based vehicles. That's not the only place where technology can make a huge difference. Autonomous driving systems can offer incredible benefits to boats and marine vehicles, too, which is precisely why HD Hyundai has unveiled its Avikus AI technology -- for marine and watercraft vehicles.

More recently, HD Hyundai participated in the Fort Lauderdale International Boat Show, to demo its NeuBoat level 2 autonomous navigation system for recreational boats. The name mashes together the words "neuron" and "boat" and is quite fitting since the Avikus' A.I. navigation tech is a core component of the solution, it will handle self-recognition, real-time decisions, and controls when on the water. Of course, there are a lot of things happening behind the scenes with HD Hyundai's autonomous navigation solution, which we'll dive into below -- HD Hyundai will also be introducing more about the tech at CES 2023.

Read more