4 ms·
This is why we need to move to Apple/android Pay type systems. The security is in the protocol. Somebody can "skim" the packets all day long and it doesn't matt
by matt_wulfeck 10y ago
This is why we need to move to Apple/android Pay type systems. The security is in the protocol. Somebody can "skim" the packets all day long and it doesn't matter.
- swiley 10y agoYeah but that's very closed and it gives apple/Google a lot of power. I think the current chip/pin API is open enough you could probably do it with just your it phone.
- kalleboo 10y agoThat's why Europe moved to Chip-and-PIN years ago. Sadly the magstripe has to remain for backwards compatibility with countries that haven't adopted it yet (the USA). I still don't get why ATMs in the EU don't let you just dip the chip in instead of sucking in the whole card.
- icebraining 10y agoSomeone could surreptitiously watch the PIN being introduced and then grab the card and run. You want the ATM to keep it locked while the user is distracted typing numbers and such.
- deleted 10y ago[deleted]
- kalleboo 10y agoThat's obviously possible but it seems a lot more risky and less efficient for the criminal - at that point they almost might as well just mug or pickpocket people. And it also seems like there are several physical (or software) locking designs you could use to work around the problem.
- icebraining 10y agoRisky and less efficient, but also doable by someone without any tech knowledge, and probably more lucrative than pickpocketing, since few people carry as much cash as one can withdraw.