3 ms·
How would this work for offline transactions? Cards need to be able to verify PINs offline and provide feedback to users & merchants, otherwise someone can type
by Rjevski 8y ago
How would this work for offline transactions? Cards need to be able to verify PINs offline and provide feedback to users & merchants, otherwise someone can type a wrong PIN at an offline terminal (on an airplane, etc) and get away with free stuff because the transaction isn’t valid.
- Symbiote 8y agoGood point, but allowing a device given away for free to anyone with a bank account to test a PIN opens up a much bigger risk than limiting it to merchant terminals.
- icebraining 8y agoI think you're really overstating the difficulty of acquiring a merchant terminal, which are available at literally any shop or restaurant that accepts cards.
- Rjevski 8y agoYou know the EMV specification is open and anyone could write software to check a PIN using a standard smartcard reader (10$ on Amazon), right?