• HakFoo@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      6
      ·
      2 days ago

      Standard compliance rules generally allow showing the first six and last four digits on a statement or receipt or whatever. That leaves 6 digits, and since you know it has to match the cksum, 1/100,000 odds on straight guess.

      You may be able to knock down two more digits if you know which bank and card type (debit, prepaid, etc) it is. The first 6 digits used to encapsulate that data but there’s a transition to 8 now.

      • JPAKx4@piefed.blahaj.zone
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 day ago

        Sure, but in this case we have a credit card number summed with a 3-4 digit number (which you don’t have to guess the length bc of the first digits of the processor identificatoon). You can try every permutation of 3-4 digit number taken out, and eliminate all the ones that don’t have a valid checksum