>And why do banks (or credit card companies) even let users pick their own PIN codes? Sure the PIN sucks, but ATM security is actually two factor, something yo

>And why do banks (or credit card companies) even let users pick their own PIN codes? Sure the PIN sucks, but ATM security is actually two factor, something you have and something you know. The cards can be duplicated, they've made good inroads on that but haven't rolled those cards out in the states. Its an example of "good enough" security. Not only is the barrier to theft much higher than the cash next to it in their wallet, you only have a 30% chance of getting into their account before the ATM eats the card. If you do get in, you can typically only withdraw $300 and your face has been recorded. Which kinda sucks that security is compromised to make more profit. I find it kind of strange that you're picking up on this, do you not read everything on HN as a stream of soul-crushing money-first attitudes too?