{"id":90,"date":"2004-04-22T09:36:24","date_gmt":"2004-04-22T09:36:24","guid":{"rendered":""},"modified":"2004-04-22T09:36:24","modified_gmt":"2004-04-22T09:36:24","slug":"","status":"publish","type":"post","link":"https:\/\/www.sungate.co.uk\/?p=90","title":{"rendered":"Headphones, credit card &#8216;chip and PIN&#8217;"},"content":{"rendered":"<p>My current set of headphones, that I use at work, gave up the ghost and so I went off to purchase a pair of new ones &#8230; I ended up getting a pair of <a href=\"http:\/\/www.sennheiser.co.uk\/products.jsp?id=05179\">Sennheiser HD497<\/a> headphones.  They look like this:<\/p>\n<p><img decoding=\"async\" src=\"http:\/\/www.sungate.co.uk\/images\/hd497.jpg\" border=\"0\" alt=\"Sennheiser HD497 headphones\"><\/p>\n<p>They seem rather nice &#8211; the sound from them seemed to be rather top-heavy to start with, but that might have been because the old ones were so poor by comparison.  They sound very good now.<\/p>\n<p>My purchase of these headphones was also the first time I used my PIN number, rather than scribbling my signature, when I paid with my credit card.  Being a conscientious disciple of the <a href=\"http:\/\/www.schneier.com\/\">Bruce Schneier<\/a> School of Security Thinking, I decided to make an assessment of whether the use of PINs is a Good Thing or not &#8230;<\/p>\n<p><b>1. What problem is the introduction of &#8216;chip and PIN&#8217; trying to solve?<\/b>  This is not terribly well-defined, although a blanket objective of &#8216;to reduce credit card fraud&#8217; is probably reasonable.<\/p>\n<p><b>2. How well does &#8216;chip and PIN&#8217; solve this problem?<\/b>  Hard to say &#8211; people are more likely to forget their PIN than &#8216;forget&#8217; their signature, so there may be problems associated with that.  Also, if someone steals your card, they have the signature too, but not the PIN.  Of course, that&#8217;s only helpful if you can <i>only<\/i> authenticate the transaction using the PIN &#8211; and that won&#8217;t happen until all retailers have the new hardware (however, given that these units will be supplied by the retailers&#8217; banks, that may not be such a long time).  Signatures aren&#8217;t that hard to forge and are rarely checked carefully by retailers, especially for low value purchases.<\/p>\n<p><b>3. What new problems does &#8216;chip and PIN&#8217; introduce?<\/b>  The consumer probably has to trust the PIN-entry keypad devices more than they would previously have had to trust a simple credit card &#8216;swipe&#8217; unit.  &#8216;Trust&#8217; here meaning trust that the retailer hasn&#8217;t tampered with the device to record card numbers and their corresponding PINs, for example.<\/p>\n<p><b>4. What are the economic and social costs?<\/b>  There is presumably a cost to the banks issuing the new cards.  And I expect they hope that the costs will be outweighed by the reduction in fraud.<\/p>\n<p><b>5. Given the above, is &#8216;chip and PIN&#8217; worth the costs?<\/b>  Time will tell, of course, but it&#8217;s largely a gamble by the <i>banks<\/i> and so long as card users are educated how to use PINs in this way, it should be a reasonable security measure.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>My current set of headphones, that I use at work, gave up the ghost and so I went off to purchase a pair of new ones &#8230; I ended up getting a pair of Sennheiser HD497 headphones. They look like this: They seem rather nice &#8211; the sound from them seemed to be rather top-heavy&#8230;&nbsp;(<a href=\"https:\/\/www.sungate.co.uk\/?p=90\">read more<\/a>)<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-90","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/www.sungate.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/90","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sungate.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sungate.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sungate.co.uk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sungate.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=90"}],"version-history":[{"count":0,"href":"https:\/\/www.sungate.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/90\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.sungate.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=90"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sungate.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=90"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sungate.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=90"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}