News for hackers. Stuff that matters.
Re:Request For Research: Basic Income by kbenson on Wednesday January 27, 2016 @09:57PM (#10985833)
> 3. Chip & pin has been required for quite a while now, contactless cards are extremely common.

Due to the way this was implemented in Europe and the fraud it enabled[1][2], I wouldn't consider it any sort of plus.

1: http://www.wired.com/2015/10/x-ray-scans-expose-an-ingenious...

2: https://news.ycombinator.com/item?id=10414375

Re:Request For Research: Basic Income by toomanybeersies on Wednesday January 27, 2016 @11:33PM (#10986304)
To be honest, that doesn't seem any less secure than requiring a signature.

It's a lot more effort to make a spoof card like that, more effort than the 5 minutes of practice required to vaguely copy someones signature and get it past a disinterested, minimum wage store clerk.

Re:Request For Research: Basic Income by IanCal on Thursday January 28, 2016 @06:20AM (#10987549)
Implanting a second chip successfully into the card seems a bit above the regular "found the card and made a squiggle like the signature on the back". And that vulnerability at least was fixed.

It's not like the magnetic stripe is particularly secure either, you could pretty easily clone someone's card and then even use your own signature.

Even then, if someone is required to take the card, put it in a reader and type in the correct pin it's a bit harder to 'skim' a bit extra at the till.

The question should not be "is chip and pin entirely secure" but "is it better than a magnetic stripe and a pen marking".

> The UK, for example, has seen a nearly 70 percent decline in counterfeit card transactions since adopting chip cards, according to Barclays.

https://squareup.com/townsquare/why-is-the-u-s-the-last-mark...

Re:Request For Research: Basic Income by makomk on Friday January 29, 2016 @05:16AM (#10994447)
Generally, if the bank thinks your PIN was used you're liable for all the fraudulent transactions rather than them. That's bad.
Re:Request For Research: Basic Income by kspaans on Friday January 29, 2016 @05:24AM (#10994481)
Yup, it's not about security, it's about liability. With chip&pin you're virtually guaranteed that the bank will say "too bad" if your PIN gets stolen. But then again with the (possibly) lower fraud levels it may be worth it? And yet again, do you see the banks passing on those savings to consumers? ;)