Hacker News Reader

I guess a way of doing it is to brute force the 8 digit CSC on the website and then transfer funds away from the card.

I hope Starbucks has some mechanism to prevent brute-forcing like this.