Thursday, October 19, 2006

Chip and Pin(ched?)

I've actually been thinking about this whole chip and pin thing. We've been told by the people who know (they must be experts as I saw one of them being interviewed by Declan Curry on BBC Breakfast) that chip and pin is more secure than the old signature system as it's more difficult to forge. Er? Picture the scene. You're at a restaurant / bar etc and the bill comes. Without thinking they present you with one of those portable chip and pin devices. You happily pop in your number (leaving a tip as well). Do you see the problem? No? How do you know that this device is what it proports to be? Still not concerned? Okay let me put it another way. The smart chip in credit cards is (broadly at least) the same technology used in SIM cards. Did you know you can buy SIM card copiers. And it's not as if they hard things to get. They even sell them in the local supermarket up from my parents house. It doesn't take a massive leap of imagination to see where this is going does it? If SIM cards can be copied them the smart chips in credit cards can be copied as well. All it takes is for someone to disguise this as a portable chip and pin machine and Bob's your uncle, a device which copies the data from your chip, captures the pin number. If they wanted to be really smart they could also incorporate on of those pinhole cameras (like the ones we're always warned about being attached to cash machines) to take a photo of the security number on the back of the signature strip. Of course it will also copy the data on the magnetic strip as well. All it's cost the crooks is a meal, and while your scoffing the cheap sweeties they've given you with the receipt, your bank account is being emptied.

Er I think I'm going to revert back to cash, or to paraphrase someone "if it doesn't scratch glass I don't accept it"

No comments:

Post a Comment