Hacker News new | ask | show | jobs
by mhast 281 days ago
Using chip and pin is what makes the system secure. The PIN is verified by the chip on the card so it can't be skimmed. (You can copy the PIN of course, but you also need the same physical chip to clone a transaction.)

Signing the recipe is a useless security theatre. That's why it's not done in Europe.
1 comments
al_borland 281 days ago
I agree 100%. I am very annoyed by it. When I go to the website for the card they proudly proclaim that it uses a signature, as if it means something. It’s also sold as a travel card, and the signature makes it a pain for travel. I had a hell of a time buying a train ticket at the airport in Germany. None of the machines worked, I assume because they wanted a PIN, so I had to try and hunt down a person who would sell me a ticket.

Now that I think about, I wonder if this signature business is a result of our restaurant norms. Since the waiter takes the card, runs it, and then brings back a bill to sign. If they switch to a PIN, every restaurant would be forced to upgrade to handheld devices, or have the customer pay up front on the way out. A worthwhile change imo, but I can see lobbyists fighting to avoid it.

link
Izkata 280 days ago
It's a remnant from when physical card theft was the main concern: You're supposed to sign the back of the card when you first get it, then each time the receipt is signed the cashier is supposed to compare the signature on the receipt to the one on the card.

I remember as a teen reading some stories about how cashiers wouldn't accept cards that didn't have a signature on the back and made people sign it right there in the store, apparently not at all understanding the purpose of it.

link
al_borland 280 days ago
That’s what’s supposed to happen, but in my 20 years of using a credit card I can only recall having my signature checked like this one time. I assumed the person was new. She ended up getting the manager and I had to show multiple forms of ID to prove I was me. It was a whole thing.

Now that we sign electronic pads, it’s even worse. There is no record of the signature on the back of the card to compare to, no one looks at it, and most of the pads are sensitive enough to sign properly. It’s a really expensive rubber stamp.

link