Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Thanks for letting us know! I ordered mine last week and just got it a couple of days ago. Now they just have to work on Apple Pay and they'll be golden :D
 

That's an OLD paper, and is what I meant by EASILY patched. All cards being issued in the US will use online verification, which addresses all offline verification vulnerabilities. iCVV addresses skimming the chip to produce a magstripe card for use at non-chip merchants (and Walmart with an insecure chip implementation), as mentioned in the paper. Magstripe fallback is by design, it's up to issuing banks to decline these transactions - not an EMV design problem.

Those vulnerabilities are not, per se, in the EMV design but rather are a result of exceedingly poor implementation. And yes, companies are still rolling out scarily insecure EMV systems (see: Walmart), but that doesn't mean EMV is "hilariously broken" - it means that it isn't nearly as secure as we hope UNLESS merchants and banks wise up and start implementing it in a more secure manner. Decline fallback transactions, actually CHECK all the data that is available to them, etc.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.