Re: zfc and Orpheus

In article <4de1eb1dd6JohnD@xxxxxxxxxxxxxxxxxxxxx>, John
Devine <JohnD@xxxxxxxxxxxxxxxxxxxxx> wrote:

> > > Easiest method is to refuse to use chip and pin
> > > cards. I can honestly say that I've *never* used chip
> > > and pin yet, and won't. I'll either pay by cheque,
> > > cash or one of the more prestigious cards which have
> > > wised up to how insecure CnP is, and are not
> > > implementing them.

> Our bank (RBS) have been resisting Chip-and-PIN cards

Hardly. They are the single biggest 'acquirer' (processor in
ordinary English) of card transactions in the UK. They
frequently write to me extolling the virtues of chip and
pin, as an account holder, as a credit card holder and as a
business using card payment systems.

> instead issuing cards bearing the user's photograph.

This was, IMHO, a good idea in principle, though I felt that
the Royal Bank was always rather half hearted about it.[1] I
still have a picture[2] and non chip Highline Card on one
account, but a chip based Highline card on another.

On the other hand, they replaced a Mastercard with my
picture on it with a non-chip and pin chip card three or
four years ago.

> Now they tell me that they are giving in to retailer
> pressure and issuing C&P cards from now on.

It is not retailer pressure, it is bank pressue - they are
pressuring themselves, if there is any pressuring being
done!

> From 14th February, you will only be able to use C&P as
> most C&P equipped retailers will not accept a signature.

Will not be *able* to accept a signature. Software uploaded
to the terminal prevents retailers not accepting a PIN.

> This is obviously completely barmy as a picture or
> signature is far more secure that a 4-digit decimal
> number. Am I right in thinking this is 13-bit security
> rather than the 128-bit we use on the Internet?

[1] I first had a card with a picture on it in the USA in
1974. I had to go to the bank and they took my picture with
a polaroid, then laminated it onto the card. This died when
magnetic strips started to come in later in the 1970s.

[2] The picture on my Highline card must be 20 years old by
now. And the bank never asked for any verification of the
likeness, as would be done for a passport.

--
Russell

http://www.russell-hafter-holidays.co.uk
Russell Hafter Holidays E-mail to enquiries at our domain
Holiday specialists for Germany, Austria, Belgium, Czech Republic
Tel 01946 861652 Fax 01946 862085
.

Loading