Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Even if an in-use credit card number is generated, you would still need the name, expiration date and cvv2 to complete most online purchases. Depending on the vendor, you may also require the billing address of the cardholder.

It's somewhat unlikely that this tool will generate many "real" account numbers, as the Bank Identification Number field is being randomly generated as well. These account numbers only satisfy the Luhn check for validity.

You might find these links interesting, they explain credit card data in depth:

http://www.dirigodev.com/blog/anatomy-of-a-credit-card-numbe...

http://blog.opensecurityresearch.com/2012/02/deconstructing-...



Well, not so much billing address but at least the zip code.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: