So Squareup.com gives you credit card merchant services on your phone... but the reader can read any magnetic stripe... when you swipe things like drivers licences or gift cards you can read data into the square program and show the last for digits of an id or something, but what else is on there? Thats where all you internet people come in... i need some engineers who are smarter than me to give me some guidance on how to decode the signal the card reader produces. Ive found some of what I think I need here on "A Day in the Life of a Flux Reversal" using a free spectrum analyzer app im able to see positive and negative waves as I swipe the card that seem to be alot like the flux lines the guy talks about...
But I thought my life would be much easier with data so I got a bunch of old cards and swiped them a few times each, recording the output from the square dongle so i can have some samples to decode with some known data
- Texas-Trust-Mastercard-5105-9400-0109-1438.mp3
In order to view this object you need Flash Player 9+ support!
- JCPenny-Gift-Card-6006492001928534134.mp3
In order to view this object you need Flash Player 9+ support!
- HEB-Gift-Card-6006-49668-81060-07754.mp3
In order to view this object you need Flash Player 9+ support!
- Dave-Busters-94937573.mp3
In order to view this object you need Flash Player 9+ support!
- Carnival-Sign-Sail-05411183.mp3
In order to view this object you need Flash Player 9+ support!
- AMC-Gift-Card-6006491324135697820.mp3
In order to view this object you need Flash Player 9+ support!
So if anybody wants to help me build an open source app to decode the data off other cards with the square reader drop me a line im @cartercole
Also: based on what ive seen from this instructable called "Magnetic stripe card spoofer" with just a little tinkering you could play back these recordings into an electromagnet and drive the reader to spoof the data you recorded. I know.. like super cool spy toys :) I now take this time to remind you that neither CarterCole.com or Carter Cole condone illegal activity and all information shared here is for curious who are people without malicious intent ( do you think that disclaimer protects me? )
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.