Natwest Card Reader?

marshall2k

The cards should work in any reader. You need the PIN for the card and then "challenge" number from the bank which is made based on the account number you're paying. The card reader then generates a "response" number. So far RBS is only asking me to use the reader to add and modify payees in internet banking.

Richard019

gt94sss2 wrote: »

I'm afraid thats not how the system most of the banks are using works - you can generate your passwords at any time and as long as they are used in order they will work..

The banks are not using time sensitive passwords - such as many companies use to login to IT networks..

Regards
Sunil

I've not had to use it yet. What's to stop someone with a cloned card and known pin from having a card reader and generating their own codes?

MPH80

Richard019 wrote: »

I've not had to use it yet. What's to stop someone with a cloned card and known pin from having a card reader and generating their own codes?

Well - a) it's not, yet, possible to clone the chip on the card - which is what's required and b) Natwest aren't implementing it so you can just generate codes - they are using a challenge/response mechanism meaning you have to type a number in that they provide as well as your pin to get a number out.

M.

Edinburghlass_2

marshall2k wrote: »

The cards should work in any reader. You need the PIN for the card and then "challenge" number from the bank which is made based on the account number you're paying. The card reader then generates a "response" number. So far RBS is only asking me to use the reader to add and modify payees in internet banking.

I just heard about these this past week (RBS) when trying to add a payee on internet banking. I had to phone to find out what it was and more importantly where it was. Apparently it had been sent out in November along with the card and the pin number so funnily enough all 3 pieces of mail had gone missing

ShelfStacker_3

Richard019 wrote: »

I've not had to use it yet. What's to stop someone with a cloned card and known pin from having a card reader and generating their own codes?

Cloned cards generally don't have chips, and the readers don't have magstripe readers.

adaze

I've had 5 readers since November and 2 new cards, the system has NEVER worked for me, I get three attempts and then the pin is locked (and yes I do follow the instructions word for word, and no I'm not stupid ). NW were going to call me back to try and sort it out, but they never did.... I just use the phone to make new payments now!

Richard019

ShelfStacker wrote: »

Cloned cards generally don't have chips, and the readers don't have magstripe readers.

How did this "fraud" work?

http://news.bbc.co.uk/1/hi/uk/6333929.stm

MPH80

Richard019 wrote: »

How did this "fraud" work?

http://news.bbc.co.uk/1/hi/uk/6333929.stm

Simple - it doesn't clone the chip.

Imagine you have a hacked machine and a fake card.

You put the hacked machine in a fake shop and get someone to make a payment attempt. At the same time, in the nearby vicinity, someone puts the hacked card into a machine. You send the details of the transaction from the hacked machine to the hacked card - except the hacked card is paying for a vastly more expensive transaction.

There's more details here:

http://software.silicon.com/security/0,39024655,39165665,00.htm

Interestingly - no one else, except the BBC, talks about the ability to make additional purchases. I have only seen attacks which allow copying of account details and pins to a magstripe card - not a chip card - which is the key difference.

Bella198421

How do you get a Natwest Card Reader? I'm with them and haven't heard anything,you can't even apply online.

marshall2k

I think you get selected based on how often you do online payments. I hazily remember getting a letter from RBS saying that, can anyone corroborate?