In contrast, if you insert the card yourself, the system seems somewhat harder to defeat, although I don't actually know what information the store then has access to. Presumably less information, or they wouldn't want to swipe the card in the first place.
As far as I know, the reason it's inserted into the till as opposed to the terminal is to facilitate faster transaction speed. It also prevents the customer from removing the card too early in the process (the card has to be in the slot until the transaction is complete), or putting in the card the wrong way round etc.
I highly, highly doubt that the large chains would store details with the intent of cloning your card. The till operator has -no- access to any of the information stored on the card.
I work in a small local convenience store in the UK, and as such our machine for doing debit/credit cards is completely seperate to the EPoS system.
The PIN never leaves the terminal that the customers use to enter the pin, and is wiped after it has been entered. There is physically no way for us to retrieve the PIN.
We used to be able to over-ride PIN entry with a supervisor card, before it became mandatory to use Chip and PIN. Now we can't do that anymore.
Apparently on that technical ground the court made, incredibly, a unanimous decision. I find that preposterous and worrying.
You're right, that's damned worrying. I can see why they might decide that though. That doesn't make it right. You would have thought that at least one person would decide against it.
he's driving the speed limit, but he was probably speeding before he slowed down to it, let's write him a ticket
Good analogy. For the record, I always stick to the limit;)
Fair point.
Although you have to beg the question, why would the employee use so called "secure delete" software if he had nothing to hide? I know it's a bit of a crappy argument, although it is something to consider.
Slashdot Mirror
In contrast, if you insert the card yourself, the system seems somewhat harder to defeat, although I don't actually know what information the store then has access to. Presumably less information, or they wouldn't want to swipe the card in the first place.
As far as I know, the reason it's inserted into the till as opposed to the terminal is to facilitate faster transaction speed. It also prevents the customer from removing the card too early in the process (the card has to be in the slot until the transaction is complete), or putting in the card the wrong way round etc.
I highly, highly doubt that the large chains would store details with the intent of cloning your card. The till operator has -no- access to any of the information stored on the card.
I work in a small local convenience store in the UK, and as such our machine for doing debit/credit cards is completely seperate to the EPoS system. The PIN never leaves the terminal that the customers use to enter the pin, and is wiped after it has been entered. There is physically no way for us to retrieve the PIN. We used to be able to over-ride PIN entry with a supervisor card, before it became mandatory to use Chip and PIN. Now we can't do that anymore.
Apparently on that technical ground the court made, incredibly, a unanimous decision. I find that preposterous and worrying.
;)
You're right, that's damned worrying. I can see why they might decide that though. That doesn't make it right. You would have thought that at least one person would decide against it.
he's driving the speed limit, but he was probably speeding before he slowed down to it, let's write him a ticket
Good analogy. For the record, I always stick to the limit
Fair point. Although you have to beg the question, why would the employee use so called "secure delete" software if he had nothing to hide? I know it's a bit of a crappy argument, although it is something to consider.