Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

self checkouts already have eye level cameras and they know which items you actually purchase so really not that farfetched to assume they're also using beacons to track your phone as well.


And when you swipe your card to check out they have your name, even if you don't use a loyalty card. Name + Face, along with some bluetooth tracking data. They can now track you forever, even if you delete the app, stop using your credit cards, etc.


>And when you swipe your card to check out they have your name, even if you don't use a loyalty card

I thought the name’s embossed on the card, but not on the magstripe/EMV chip data?


It's very much encoded in the track data. It may not be in clear-text by the time it leaves the reader but it's encoded in the data.


Do you mind linking to a source? Wikipedia has details on it, but it doesn't say anything about names. https://en.wikipedia.org/wiki/Magnetic_stripe_card#Financial...


From your link, it looks like "Name" is in Track 1:

  Start sentinel — one character (generally '%')
  Format code="B" — one character (alpha only)
  Primary account number (PAN) — up to 19 characters. 
  Field Separator — one character (generally '^')
  Name  — 2 to 26 characters
  ...


Thanks, not sure how I missed that.


It's also part of the EMV Specification and can be read with any nfc or smart-card capable reader. You don't need a special payment terminal.

https://www.emvlab.org/emvtags/show/t5F20/

There is one store in my neigbourhod where the payment terminals show this field (my full name) on the screen during checkout. I was very surprised when I noticed this the first time.

But apparrently not all card issuers fill the field with correct data. One card, a prepaid Visa from a big fintech, has "N/A" programmed in the field.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: