Hacker News Reader

The chip on a credit or debit card is an HSM.

And mostly irrelevant for online payments.

Their solution to that was a "security code" also printed on the card, lol

The number printed on the card, and the magnetic strip are not.