5 ms·

This is not a shining example of the security of credit cards, but an example of how insecure they are. We regularly carry passwords into our bank accounts in o

This is not a shining example of the security of credit cards, but an example of how insecure they are. We regularly carry passwords into our bank accounts in our pockets, and punch them into random ATM machines on the street in a foreign country, say them over the phone, or type them in while using the coffee shop WiFi. It is no wonder our cards are frequently compromised and the total cost of card fraud is many dozens of billions of dollars per year. Usually, the credit card company is the one absorbing the cost of this fraud - the food or physical goods that the fraudster purchased doesn't just magically leave their possession. It is entirely possible to build a company that holds custody of your crypto, extracts rent on transactions or borrows with your deposits, and uses their profits to give you some financial protection up to a certain limit. Most likely within 10+ years your local bank will have some account that will custodially hold some limited amount of funds in crypto that are FDIC insured. But not everybody in the world wants this system, and not everybody wants all of their assets to be held in this way.

jasonshaev 4y ago
Perhaps, but it IS a good example of a system that protects the end user from monetary loss in the event of fraud due to leaked credentials (in this case the card number + CVV + exp date). In my opinion, any system that seeks to replace credit cards needs to have a similar ability to recover user funds in the case of inevitable security leaks, which is something many crypto systems struggle with.
- nybble41 4y ago
  > due to leaked credentials (in this case the card number + CVV + exp date) That information is practically public already, since you have to provide it to everyone you purchase from online with your card. If you regularly buy things online with your credit or debit card it's less a matter of if the credentials will leak than when. Regular checking and savings accounts are at least as bad given the existence of Direct Debit, a system where practically anyone can take money out of any account just by knowing the routing number (public information) and account number (printed on every check). Cryptocurrency aside, just compare that to something like PayPal, where the authorization happens directly between you and the payment processor: the merchant never gets your credentials and can't take money out of your account without your express permission. The traditional banking system has the worst security procedures; the design is reminiscent of the early days of the Internet where plaintext passwords were commonplace in protocols like rlogin, FTP, SMTP, and unencrypted HTTP, when authentication was used at all. The only thing keeping it from complete collapse is the absolute fortune they spend on statistical anti-fraud analysis, which completely coincidentally requires them to have deep insight into every transaction passing through their network. Not that they would ever think of using that immensely valuable data for their own gain, of course. Perish the thought. In any case, Bitcoin and most other cryptocurrencies weren't built to replace credit cards, but rather to replace cash. If someone steals your cash or you somehow manage to hand it to the wrong person or simply destroy it you can't just call up the U.S. Treasury and expect them to put things right. Holding cash and transacting in cash has its downsides, and yet those same risky properties can be extremely useful if proper care is taken. Escrow and human-mediated reversible payments can be implemented on top of a system of irreversible transactions. The reverse doesn't work; you can't very well run an escrow service where the payer can reverse their payment into the escrow account without following the escrow procedures after getting the goods. Compared to physical cash, as a digital good crypto has several advantages and a few disadvantages. In the latter category you have the obvious risk of hackers compromising the wallet; IMHO a separate, secure, hardware wallet is mandatory if you keep any significant amount of self-custodial crypto. On the flip side, however, it's not all that difficult or expensive to make your crypto more secure against would-be thieves than the gold in Fort Knox if you're willing to put in a modicum of effort, and the possibility of geographically-distributed encrypted backups makes it much harder to separate you from your money if you plan ahead a bit.
Salgat 4y ago
That's because they're far more convenient and user friendly, and the fraud detection makes up for that compromise in security. As far as user experience goes, it's a win-win and a superior experience to paying with cryptocurrency.

jasonshaev 4y ago

Perhaps, but it IS a good example of a system that protects the end user from monetary loss in the event of fraud due to leaked credentials (in this case the card number + CVV + exp date). In my opinion, any system that seeks to replace credit cards needs to have a similar ability to recover user funds in the case of inevitable security leaks, which is something many crypto systems struggle with.

nybble41 4y ago
> due to leaked credentials (in this case the card number + CVV + exp date) That information is practically public already, since you have to provide it to everyone you purchase from online with your card. If you regularly buy things online with your credit or debit card it's less a matter of if the credentials will leak than when. Regular checking and savings accounts are at least as bad given the existence of Direct Debit, a system where practically anyone can take money out of any account just by knowing the routing number (public information) and account number (printed on every check). Cryptocurrency aside, just compare that to something like PayPal, where the authorization happens directly between you and the payment processor: the merchant never gets your credentials and can't take money out of your account without your express permission. The traditional banking system has the worst security procedures; the design is reminiscent of the early days of the Internet where plaintext passwords were commonplace in protocols like rlogin, FTP, SMTP, and unencrypted HTTP, when authentication was used at all. The only thing keeping it from complete collapse is the absolute fortune they spend on statistical anti-fraud analysis, which completely coincidentally requires them to have deep insight into every transaction passing through their network. Not that they would ever think of using that immensely valuable data for their own gain, of course. Perish the thought. In any case, Bitcoin and most other cryptocurrencies weren't built to replace credit cards, but rather to replace cash. If someone steals your cash or you somehow manage to hand it to the wrong person or simply destroy it you can't just call up the U.S. Treasury and expect them to put things right. Holding cash and transacting in cash has its downsides, and yet those same risky properties can be extremely useful if proper care is taken. Escrow and human-mediated reversible payments can be implemented on top of a system of irreversible transactions. The reverse doesn't work; you can't very well run an escrow service where the payer can reverse their payment into the escrow account without following the escrow procedures after getting the goods. Compared to physical cash, as a digital good crypto has several advantages and a few disadvantages. In the latter category you have the obvious risk of hackers compromising the wallet; IMHO a separate, secure, hardware wallet is mandatory if you keep any significant amount of self-custodial crypto. On the flip side, however, it's not all that difficult or expensive to make your crypto more secure against would-be thieves than the gold in Fort Knox if you're willing to put in a modicum of effort, and the possibility of geographically-distributed encrypted backups makes it much harder to separate you from your money if you plan ahead a bit.

Salgat 4y ago

That's because they're far more convenient and user friendly, and the fraud detection makes up for that compromise in security. As far as user experience goes, it's a win-win and a superior experience to paying with cryptocurrency.