6 ms·
You cant blame yourself for that. Would you blame a front camera inventor for the deaths of people taking selfies on the edge of a cliff and falling down?
by ssijak 8y ago
You cant blame yourself for that. Would you blame a front camera inventor for the deaths of people taking selfies on the edge of a cliff and falling down?
- Symbiote 8y agoI'd met one of those students, they went to my university. Whoever signed off on the badly designed process is to blame. It should not have been possible for the card reader to verify a PIN. It could easily generate a code with a fake PIN, and leave the banking website to verify that. It was already known that criminals would escort someone to an ATM when streaking their card, and demand the real PIN was given. This made it a lot easier.
- Rjevski 8y agoHow would this work for offline transactions? Cards need to be able to verify PINs offline and provide feedback to users & merchants, otherwise someone can type a wrong PIN at an offline terminal (on an airplane, etc) and get away with free stuff because the transaction isn’t valid.
- Symbiote 8y agoGood point, but allowing a device given away for free to anyone with a bank account to test a PIN opens up a much bigger risk than limiting it to merchant terminals.
- icebraining 8y agoI think you're really overstating the difficulty of acquiring a merchant terminal, which are available at literally any shop or restaurant that accepts cards.
- Rjevski 8y agoYou know the EMV specification is open and anyone could write software to check a PIN using a standard smartcard reader (10$ on Amazon), right?