Phil Cook wrote:
> And lo on Thu, 01 May 2008 16:58:55 +0100, Invisible <voi### [at] devnull> did 
> spake, saying:
> 
>>
>> Well, as I understand it, if they don't physically have your card, 
>> knowing your PIN isn't much help anyway...

One can just write in the number of the card (which is usually fully 
visible for a moment while when you pay your shoppings) and use the PIN 
(or better yet, *only* sign a piece of paper). Sure, the system will 
check for problems with your card, but since it hasn't been stolen or 
anything, there seems to be no problem.

> That's not to mention the cloning devices that can be affixed to the 
> front of readers etc.

Luckily that's still very hard with EMV-system (the cards with chips), 
while it's trivial with the magnetic cards.

-- 
Eero "Aero" Ahonen
    http://www.zbxt.net
       aer### [at] removethiszbxtnetinvalid

Post a reply to this message