Chip 'n' Pin - A Quick Guide Discussion Area

James

BritBrat wrote: »

Are you saying you have two cards on the same account?

EDIT

Oh I see, you use Chip and Signature credit cards.

That sounds like a good idea, did you have any problem getting signature credit cards?

Best bet is to request Chip & Signature Cards in writing.

If you decide to try a call centre you'll probably find the person you talk to has never heard of Chip & Signature. This being the case it's best to ask for Customer Serivce first or be transferred to someone who can talk to you about Chip & Signature.

From BBC News 24 (Video)

Banks refuse to reimburse fraud victims, telling them they must have been negligent with their PIN (Citizen's Advice Bureau).

Click here for video (1 min 55 secs into the broadcast).

ash213

dddddtest:cool:

James

Story from the Press Association.

Click here.

Alfie_E

Today’s BBC Newsnight (Tuesday, 26 February 2008) contained a good piece summarising the vulnerabilities and customer liabilities surrounding Chip and PIN. It should be appearing here on iPlayer sometime soon.

BritBrat

Alfie_E wrote: »

Today’s BBC Newsnight (Tuesday, 26 February 2008) contained a good piece summarising the vulnerabilities and customer liabilities surrounding Chip and PIN. It should be appearing here on iPlayer sometime soon.

Interesting, thanks Alfie.

Most of the general public think chip and pin are safe.

I thought that woman was talking a load of **** at times.

I am going to try and record it, it may come in handy one day as she said that there was no change in who has to prove there was fraud but I was under the impression banks now placed the customer at fault if pin was used because they must have given it to someone.

bert&ernie

Most of the general public think chip and pin is safe because, generally speaking, it is. It is certainly safer than old mag stripe and signature method.

The newsnight segment was the usual media scaremongering - trying to make a sensational story out of some rather tame academic research.

Chip and PIN has been very successful at reducing POS fraud. However, the fraudsters always find a way around whatever countermeasures are put in place. The Newsnight "crack" can only be exploited by making transactions using the magstripe and PIN e.g. foreign ATMs, magstripe fallback etc. Frankly, there are easier ways to harvest the details needed for this fraud, not to mention far easier methods of fraud altogether such as account takeover and ID theft.

The APACS woman could have done better. She tried to make the point that the chip security is evolving, but paxo just seized on that and tried to make out that this means the current chips are insecure - a complete fallacy.

Another fallacy that should be addressed is the assertion that customers have to prove their transactions were fraudulent. The only liability shift introduced by chip and pin was from the bank to the retailer.

I do think the industry does need to improve its practice over disputed transactions - especially when it comes to offering evidence that a transaction was genuine. But lets not forget, there are plenty of people willing to try it on if they think there is a chance of getting a few genuine transactions written off - alleged fraud needs to be vigorously investigated.

BritBrat

Most of the general public think chip and pin is safe because, generally speaking, it is. It is certainly safer than old mag stripe and signature method.

I think the old mag strip one is safer now because hardly anyone uses them and the criminals have moved on to chip and pin.

bert&ernie

That last statement is absurd - its the logical equivalent of saying that pound notes are "safer" because nobody counterfeits them anymore. You are ignoring the fact that magstripe only cards are obsolete in the UK. Chip and Signature cards are a different matter - the supposed merits of which have been discussed on this thread ad nauseum.

James

How our cousins from over the Pond reported on the same story:

BBC2 news show, Newsnight. Sandra Quinn, the Director of Communications for APACS, appeared on the show and tried to spin the risks as best as she could. She reported that there are over a million Chip and PIN machines in place in Britain, then immediately said there is no break in the system.
“The important thing to stress…is that we are not talking about a break in the Chip & PIN system overall,” she said defending the Chip & PIN system from the news story on Cambridge research. If she watched the same news report that thousands of others did, it’s clear that she failed to grasp the concept of the actual story. In the same interview, she admitted that APACS was well aware of the design flaws and potential for fraud.

Article from The Tech Herald (Click here).

bert&ernie

Thanks for that - very enlightening.

Obviously. APACS should immediately instigate a recall of all vulnerable PEDs and any cards issued without DDA and iCVV. Merchants and cardholders will of course be delighted at the extra security this provides and will gladly shoulder any inconvenience and cost to obtain replacements.