Chip + Sig still pointless

Get credit card fraud help: For victims of credit card fraud and identity theft, and those that can help.
13 posts
User avatar
lobbythis
Centurion Member
Centurion Member
 
Posts: 618
Joined: Sun Sep 07, 2014 8:53 pm
Location: usa

Chip + Sig still pointless

Postby lobbythis » Sat Oct 10, 2015 4:39 am



User avatar
CarefulBuilder14
Centurion Member
Centurion Member
 
Posts: 3754
Joined: Thu May 08, 2014 7:42 pm
Location: United States

Re: Chip + Sig still pointless

Postby CarefulBuilder14 » Sat Oct 10, 2015 10:42 am

lobbythis wrote:anyone can draw squiggly lines brah


http://www.theverge.com/2015/10/9/94867 ... redit-card

That same website (if you follow the link about Target to another page) says encrypted debit PINs were also stolen during that hack. Would Chip+PIN cardit cards have been any safer than Chip+SIg cards?

I've also read elsewhere that some people have hacked supposedly secure merchant-to-bank communications. I don't recall the details (and I don't think I even understood it all at the time), but the gist was that even if you don't know the PIN, it's possible to convince the system at some point that whatever you entered is the correct PIN.

A chip and anything beats a magnetic strip. Even more important is avoiding incompetent customer service.
Wallet: Prestige CSP SchwabPlat Freedom It Hyatt SallieMae AAPlat
SD: Arrival BrooksBros BCE ED IHG
Letting new accounts cool off since May
Really not sure what I'll add next or when

User avatar
lobbythis
Centurion Member
Centurion Member
 
Posts: 618
Joined: Sun Sep 07, 2014 8:53 pm
Location: usa

Re: Chip + Sig still pointless

Postby lobbythis » Sat Oct 10, 2015 1:46 pm

CarefulBuilder14 wrote:That same website (if you follow the link about Target to another page) says encrypted debit PINs were also stolen during that hack. Would Chip+PIN cardit cards have been any safer than Chip+SIg cards?


Were those chip + sig or just normal debit cards?

CarefulBuilder14 wrote:
I've also read elsewhere that some people have hacked supposedly secure merchant-to-bank communications. I don't recall the details (and I don't think I even understood it all at the time), but the gist was that even if you don't know the PIN, it's possible to convince the system at some point that whatever you entered is the correct PIN.

A chip and anything beats a magnetic strip. Even more important is avoiding incompetent customer service.


If they're breaching some company or bank's entire network like that then I guess we are f*cked no matter what we have.

User avatar
CarefulBuilder14
Centurion Member
Centurion Member
 
Posts: 3754
Joined: Thu May 08, 2014 7:42 pm
Location: United States

Re: Chip + Sig still pointless

Postby CarefulBuilder14 » Sat Oct 10, 2015 2:37 pm

I've never heard of a Chip+Sig debit card. Every debit card I've had, whether it had a chip or not, required a PIN.
Wallet: Prestige CSP SchwabPlat Freedom It Hyatt SallieMae AAPlat
SD: Arrival BrooksBros BCE ED IHG
Letting new accounts cool off since May
Really not sure what I'll add next or when

JonE
Centurion Member
Centurion Member
 
Posts: 335
Joined: Sat Jan 24, 2015 9:55 am
Location: Denver

Re: Chip + Sig still pointless

Postby JonE » Sat Oct 10, 2015 4:52 pm

I have found two chip machines (At Kroger and Petsmart) and neither one work, even after October 1st.
Current Cards: Chase Freedom, Discover IT
Future: TBD

User avatar
CarefulBuilder14
Centurion Member
Centurion Member
 
Posts: 3754
Joined: Thu May 08, 2014 7:42 pm
Location: United States

Re: Chip + Sig still pointless

Postby CarefulBuilder14 » Sat Oct 10, 2015 5:47 pm

CarefulBuilder14 wrote:I've never heard of a Chip+Sig debit card. Every debit card I've had, whether it had a chip or not, required a PIN.

...Although I haven't used my Chase debit for years, and I've not yet used my Schwab debit card. I don't exactly have a lot of recent experience using debit.
Wallet: Prestige CSP SchwabPlat Freedom It Hyatt SallieMae AAPlat
SD: Arrival BrooksBros BCE ED IHG
Letting new accounts cool off since May
Really not sure what I'll add next or when

luvbullmarkets
Centurion Member
Centurion Member
 
Posts: 241
Joined: Thu Apr 21, 2011 1:02 am
Location: TPC Stonebrae

Re: Chip + Sig still pointless

Postby luvbullmarkets » Sat Oct 10, 2015 6:50 pm

The warning emphasizes the weakness of signature-based systems ("chip and sign" rather than "chip and PIN"), and instructs merchants to require a PIN number in place of a signature wherever possible. "This fully utilizes the security features built within the EMV card," the warning states.


The US merchant has zero say in switching to chip+pin. That is the sole decision of the card issuers and the POS processing terminal manufacturers.
Amex EveryDay, Amex BCE , Barclaycard Arrival+ WEMC, CSP Visa Signature, Discover it, Wells Fargo Propel 365 Amex

"Attack this day with a level of enthusiasm unknown to mankind." - Jack Harbaugh

takeshi
Centurion Member
Centurion Member
 
Posts: 1733
Joined: Wed Jun 05, 2013 3:12 pm
Location: US

Re: Chip + Sig still pointless

Postby takeshi » Mon Oct 12, 2015 9:40 am

lobbythis wrote:Chip + Sig still pointless

That's an oversimplifcation. C&S isn't quite as secure as C&P but that doesn't make it pointless. Further, the concerns listed in the FBI warning aren't all specific to C&S even though they do recommend C&P. I'm not sure it really matters all that much at this point since most people are still swiping anyway.

CarefulBuilder14 wrote:I've never heard of a Chip+Sig debit card. Every debit card I've had, whether it had a chip or not, required a PIN.

Debit cards have PIN's but that doesn't necessarily mean that they're chip & PIN if they're EMV. There are C&S debit cards but that comes into play when they're processed as credit cards and not as debit. A number of people have mentioned that they didn't even have to sign for a debit card transaction but that's because the cards were processed as credit and were chip & sig and were under the minimum transaction limit of the merchant for a signature.

Vermonster
Centurion Member
Centurion Member
 
Posts: 725
Joined: Mon Oct 01, 2012 11:09 pm
Location: NJ

Re: Chip + Sig still pointless

Postby Vermonster » Mon Oct 12, 2015 11:52 am

The weakness of the US system is the signature. People have been lead to believe that the signature protects them. It only protects the banks. For a while when I was younger I would just sign with an X. What sort of security is that?
Chase Freedom $9k~~Chase Sapphire Preferred $6.5k~~Amex Blue Cash Preferred $12.4k~~Citi Double Cash $4.7k

User avatar
lobbythis
Centurion Member
Centurion Member
 
Posts: 618
Joined: Sun Sep 07, 2014 8:53 pm
Location: usa

Re: Chip + Sig still pointless

Postby lobbythis » Mon Oct 12, 2015 5:30 pm

Vermonster wrote:The weakness of the US system is the signature. People have been lead to believe that the signature protects them. It only protects the banks. For a while when I was younger I would just sign with an X. What sort of security is that?


Same here. I just draw a line across the screen. This entire system has never made sense, at least from the customer standpoint. It gets a laugh from people and I just like spreading the knowledge of how silly it is. Some guy on YouTube uploaded a video this year mocking the entire system.



Return to “Credit Card Fraud”

Who is online

Users browsing this forum: No registered users and 0 guests