Monday, December 18, 2006

Is chip and pin safe?

I like cash, well everyone likes cash, but what I mean is I prefer to handle transactions in cash. Yes its not safe or reliable as such, but is using a card any safer? How about chip and pin?

One senario Ive seen time and time ago is during a store purchase a customer places their card on the till desk, while the cashier is packaging goods or still swiping them and the customer gets distracted or turns away. Not safe.

I saw this the other weekend, a busy shopping day at christmas, a couple were at the till the cashier was wrapping goods the women always destracted by shiny things walked a drift, the man had a call on his mobile, placing his card on the till desk, making a note with the cashier that its for his wife to pay, while he dashed off to answer the call, the cashier fished wrapping and asked the wife for payment, the wife going to the husband, he came back saying 'but I gave it to you?' the husband under pressure with a que building, paid by cash and they left without a second thought. Appart from the fact the cashier was a thief and noone said anything, the couple were clearly working professionals and competent, but they let it happen, they walked away.

It didn't matter that the card was chip and pin, what other risks are there with chip and pin?


They use a 4 digit number , the encryption is smaller than online shopping in which you use your full card number, the encryption is more open to attack?

The pin is a number, but many people find it difficult to remember their number, they write it down or change their card pin to birthday or lucky numbers, not safe, quite predictable?

If your card is abused, it happens, its impossible to prove it, as a digit pin has been typed in, how can you prove it wasn't you, with a signeture this was easier to prove your innocence, but with the chip and pin you are guilty untill you prove other.

Once people feel more safe by them, they will become less careful, its still often easy to see what a person types in to the keypad, especially in pushy ques.

These are the risks I can think of, however the following articles go on further:

LINK (Comments of Bruce schneiers blog).
Some really interesting responses regarding chip and pin and changable pin numbers.

LINK2(Article on chip and pin from the bbc).
The part of this article which is worth making a point of is how banks are avoiding liability for fraud by making the customer liable.

LINK3(An article on the flaw in the system that allows insiders to guess pin numbers).
Intresting, but it also the point is in regards to any bank you have dealings with not just your own bank.

LINK4(Everything on chip and pin).
A pdf document on chip and pin Advantages/ disadvantages , casestudies, a real good resource to know chip and pin from every side.

On a more positive note:

LINK5
Chip and pin has brought card fraud down stated in this article, even if its still possible, it has slowed it down. A big positive.

Chip and pin logically has brought card fraud down, its understandable even from me a critic, however, criminals always find another way and using only four numbers instead of a signature maynot be better in my opinion.

0 Comments:

Post a Comment

<< Home