4 ms·
> Seriously: Why doesn't the US implement chip-and-pin? Chip and PIN was shown to be flawed in 2010 at CCC[0]. This isn't why the US doesn't use it, but it it'
by nly 13y ago
> Seriously: Why doesn't the US implement chip-and-pin?
Chip and PIN was shown to be flawed in 2010 at CCC[0]. This isn't why the US doesn't use it, but it it's a bit of a disaster in its own right.
http://events.ccc.de/congress/2010/Fahrplan/events/4211.en.html http://events.ccc.de/congress/2010/Fahrplan/events/4211.en.h...
- aspensmonster 13y agoInteresting! I don't have a strong enough background to know if Ron Garret's suggested protocol is superior to chip-and-pin or falls to the same sort of attack mentioned in the link, but surely a strong and water-tight implementation is floating out there somewhere in the collective ether.
- nly 13y agoThe problem is presumably getting everyone to agree and move at once. Same problem with all the early 90s Internet protocols. Chip n PIN really messed up though, it was a big opportunity for change.