4 ms·
i used the first number that the bank generated for me and i'm changing all the pins to be the same. it's better than picking 1234, but not the safest option. b
by zuppy 8y ago
i used the first number that the bank generated for me and i'm changing all the pins to be the same. it's better than picking 1234, but not the safest option. but again, i'm lazy...
in my defence, i'm using 2 pins, one for all debit cards, one for all credit cards.
- corobo 8y agoIndeed I've only got 2 pins across all cards. My reasoning is if I'm half asleep and put the wrong pin in once I can just use the other. If I had more than one I might mess up 3 times and my card is swallowed by the machine and I have to get a new one sent out This is mainly a recent change, as with contactless I rarely have to use the PIN
- usrusr 8y agoA compromise could be variations of the main pin, like replacing one digit with one from the card number. Since the only real attack on pins is a combined peek-then-rob attack, a variation like that should be enough to avoid damage spillover to the unpeeked cards. If one wanted to go all geek, one could of course do some mental hashing, e.g. by using the digits of the primary pin as indices into the string of digits prominently printed on the secondary card. Pins are a bit of a safe playground for schemes like that, because the schemes are never significantly more unsafe than the best four-digit number.
- Markoff 8y agosame here but almost forgetting it due to contactless payments without PIN under 20€