3 ms·

It doesn't have to be on by default. Just make it an option, so that those of us who don't get shitfaced on a regular basis can safeguard our credit cards.

philwelch 13y ago
I find that response insufficient, not to mention insufferably smug. You can't control when other people leave it turned on, merchants can't control when their customers have it turned on, and there are cases where people spend large enough amounts of money to worry about, get bottlenecked at checkout, and for whatever reason might not do a great job at smoothly handling SMS challenge/response. If having an expensive night out at the bar is too déclassé for you, how about the Christmas shopping rush at a high end department store that has shitty wireless reception? Just because a solution solves your use case doesn't mean it's a good idea. The fact is, this would be a total nightmare to bars and B&M retail establishments, to name two examples, and any significant change to the credit card system requires merchants to be on board. The best solution for customers is still chargebacks. Unfortunately, merchants still have to eat the cost when a chargeback happens, which is why security provisions like chip and PIN typically come with the revocation of chargeback privileges. But if merchants are the ones driving these security features, they have absolutely no reason to go along with something that creates a worse experience for them.
- paul9290 13y ago
  hey it would no doubt stop billions of dollars being stolen. Also, if you have this enabled, your purchase doesn't go through until you approve the charge. As for wireless reception... 4G & 3G solves that as it justs a text message going through. Further banks who offer this could set a high default amount like $500 and the end user could change it to something higher. Further, further as noted by another here, the user has the ability to enable this or not. If you know you are a irresponsible drinker then this would not be a solution for you. Also, if your passed out drunk how are you going to pay your bill anyway? This is something I want after being hacked and a solution that would suit my needs and many others who choose it. Anyone have any other solutions?
  - philwelch 13y ago
    Did you even read the comment you're responding to? > Also, if you have this enabled, your purchase doesn't go through until you approve the charge That's the problem. You already drank the drinks. How's the bar going to get paid? Even in a retail situation, the amount of time it takes for the SMS exchange to go through, or for you to argue with the person at the register about it not working, makes bottlenecks even worse and makes more hassle and more loss for merchants. Since merchants are the ones driving adoption of security features, they'll never sign onto something that doesn't help them. > As for wireless reception... 4G & 3G solves that as it justs a text message going through. How does that solve the problem? Lots of places have poor mobile reception. > Further, further as noted by another here, the user has the ability to enable this or not. If you know you are a irresponsible drinker then this would not be a solution for you. That's not the problem. The problem is that merchants can't control which cardholders have this feature turned on, nor can other customers. So as a bartender (not that I am one, but for sake of argument), let's say you forgot to charge your phone and it died and as a result I can't close your tab at the end of the night. What am I supposed to do? There are 20 people trying to close their tab at the same time. That's why merchants will never allow this kind of thing to be implemented. > Also, if your passed out drunk how are you going to pay your bill anyway? I'm not talking about "passed out drunk", I'm talking about "leaving the bar at closing time but still capable of closing the tab" drunk. Although if you are pass out drunk, the bar will kick you out and hold onto your credit card to make sure they still get paid. Otherwise, drunk people are perfectly good at signing receipts or remembering their PIN for their chip and PIN, or else bars wouldn't accept credit cards already. > This is something I want after being hacked and a solution that would suit my needs and many others who choose it. As I said, just because a solution solves your use case doesn't mean it's a good idea. > Anyone have any other solutions? Yeah: file a damn chargeback. Problem solved. Failing that, chip and PIN for in-person purchases and 2FA for online purchases only.

philwelch 13y ago

I find that response insufficient, not to mention insufferably smug. You can't control when other people leave it turned on, merchants can't control when their customers have it turned on, and there are cases where people spend large enough amounts of money to worry about, get bottlenecked at checkout, and for whatever reason might not do a great job at smoothly handling SMS challenge/response. If having an expensive night out at the bar is too déclassé for you, how about the Christmas shopping rush at a high end department store that has shitty wireless reception? Just because a solution solves your use case doesn't mean it's a good idea. The fact is, this would be a total nightmare to bars and B&M retail establishments, to name two examples, and any significant change to the credit card system requires merchants to be on board. The best solution for customers is still chargebacks. Unfortunately, merchants still have to eat the cost when a chargeback happens, which is why security provisions like chip and PIN typically come with the revocation of chargeback privileges. But if merchants are the ones driving these security features, they have absolutely no reason to go along with something that creates a worse experience for them.

paul9290 13y ago
hey it would no doubt stop billions of dollars being stolen. Also, if you have this enabled, your purchase doesn't go through until you approve the charge. As for wireless reception... 4G & 3G solves that as it justs a text message going through. Further banks who offer this could set a high default amount like $500 and the end user could change it to something higher. Further, further as noted by another here, the user has the ability to enable this or not. If you know you are a irresponsible drinker then this would not be a solution for you. Also, if your passed out drunk how are you going to pay your bill anyway? This is something I want after being hacked and a solution that would suit my needs and many others who choose it. Anyone have any other solutions?
- philwelch 13y ago
  Did you even read the comment you're responding to? > Also, if you have this enabled, your purchase doesn't go through until you approve the charge That's the problem. You already drank the drinks. How's the bar going to get paid? Even in a retail situation, the amount of time it takes for the SMS exchange to go through, or for you to argue with the person at the register about it not working, makes bottlenecks even worse and makes more hassle and more loss for merchants. Since merchants are the ones driving adoption of security features, they'll never sign onto something that doesn't help them. > As for wireless reception... 4G & 3G solves that as it justs a text message going through. How does that solve the problem? Lots of places have poor mobile reception. > Further, further as noted by another here, the user has the ability to enable this or not. If you know you are a irresponsible drinker then this would not be a solution for you. That's not the problem. The problem is that merchants can't control which cardholders have this feature turned on, nor can other customers. So as a bartender (not that I am one, but for sake of argument), let's say you forgot to charge your phone and it died and as a result I can't close your tab at the end of the night. What am I supposed to do? There are 20 people trying to close their tab at the same time. That's why merchants will never allow this kind of thing to be implemented. > Also, if your passed out drunk how are you going to pay your bill anyway? I'm not talking about "passed out drunk", I'm talking about "leaving the bar at closing time but still capable of closing the tab" drunk. Although if you are pass out drunk, the bar will kick you out and hold onto your credit card to make sure they still get paid. Otherwise, drunk people are perfectly good at signing receipts or remembering their PIN for their chip and PIN, or else bars wouldn't accept credit cards already. > This is something I want after being hacked and a solution that would suit my needs and many others who choose it. As I said, just because a solution solves your use case doesn't mean it's a good idea. > Anyone have any other solutions? Yeah: file a damn chargeback. Problem solved. Failing that, chip and PIN for in-person purchases and 2FA for online purchases only.