[Boards: 3 / a / aco / adv / an / asp / b / biz / c / cgl / ck / cm / co / d / diy / e / fa / fit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mu / n / news / o / out / p / po / pol / qa / r / r9k / s / s4s / sci / soc / sp / t / tg / toy / trash / trv / tv / u / v / vg / vp / vr / w / wg / wsg / wsr / x / y ] [Home]
4chanarchives logo
>american friend telling me about his new chip debit card
Images are sometimes not shown due to bandwidth/network limitations. Refreshing the page usually helps.

You are currently reading a thread in /g/ - Technology

Thread replies: 66
Thread images: 1
>american friend telling me about his new chip debit card
>he's surprised when I tell him I've had one of those for close to a decade

Why is the US so far behind when it comes to card technology?

I mean do you guys even have NFC cards yet? Nowadays you can just tap your bank card and have it pay instantly. While NFC phone payments are neat, you guys sure shit the fan when it comes to debit/credit cards.
>>
>>47788408
>does my card pay for things
>do i really need to bash my card on a reader like some shit chucking ape
like you yuropoors even have money to spent topkek
>>
i live in canada have had chip and pin since 2004-2005 ish
>>
The costs of overhauling the system probably still exceeds losses to fraud, so they don't bother.
>>
It was a pain in the ass travelling in other 1st world countries without a chipped card. Now I don't have to carry a wad of cash or get one of those prepaid NFC cards in every country I visit.
>>
>>47788408
US banks just didn't really care. They were happy to be where our banks ceased to be in the 1990's.

Online banking features and security devices also were shit when I was in the USA just a few years ago.

Some banks apparently even took a long ass time to clear transactions between some of their actual bank locations. Meanwhile, Europe long had this working inside banks, between national banks, and for a while even in all of Europe.
>>
American banking / financial infrastructure is terrible and the problem extends beyond just cards.

Did you know in the USA it takes 3-5 days to process a banking transfer? Where I live such bullshit does not exist, transfers are processed automatically, instantly.
>>
>>47788408
Interesting I see this thread now, I just used my new credit card w/ chip for the first time at Failmart the other day and I didn't get what the hell the pad meant when it said 'insert card' and finally the cashier had to show me. I've always just swiped w/ my debit, and the first 5-10 times I used the credit card, I also swiped that.

I think Americans are wary about NFC because they've seen stories about guys with card readers just brushing up against people in a crowd and stealing their credit card number, which I still feel like is a legitimate thing that could happen.

For full disclosure, I'm 23 and I've had my debit card since like 2007 or 2008 and just got the credit card like six weeks ago
>>
>>47788459
So why did the rest of the world upgrade?

I recall fraud is generally a bigger problem than in the USA than in most of the first world, and that's not even just the case with banking, though also...

>>47788474
>Did you know in the USA it takes 3-5 days to process a banking transfer? Where I live such bullshit does not exist, transfers are processed automatically, instantly.
Hah, same idea as me just one post ago. Yea, this is ridiculous.
>>
>>47788468
>tfw bank at a major bank and my password can't be longer than 7 characters

That's fucked up
>>
>>47788474
Jesus Christ! So happy I don't live in that second world dump.
>>
>>47788482
You're right, NFC also doesn't have much acceptance here yet for that reason.

But chip cards don't necessarily need to have NFC, they just can have chips, which aren't so ridiculously easy to clone or even blindly fake as magnet strips are.

>>47788510
Yep. I also had that issue with my acquaintance's bank account, at which point I forfeited e-banking as option on my account.

Oh, and it was *cheaper* for me to withdraw money with my swiss debit card over the Visa plus network than with a rival US bank's card on an ATM. And that was in Sillicon valley.
>>
>>47788554
I have on money so I'm not worried about it but maybe someday I'll have enough money to worry about having someone steal my money. That would be awesome ;-;
>>
>tfw in U.S.
>tfw credit card company sent me card with chip
>tfw never told me to set up PIN
>tfw no chip readers

I don't understand the point.
>>
consumer protection in the USA is the best in the world so high security cards aren't really necessary
>>
>>47788474
>Did you know in the USA it takes 3-5 days to process a banking transfer?

Literally what?
>>
>>47788408
Jews.

But really, cheap asshole vendors
>>
>>47788574

Laws are changing. By October everyone that takes credit cards will legally have to have NFC readers.

I just dropped $25k on new POS systems at my business two years ago, and I'm going to have to drop another few thousand on new card readers before the end of the year. It's bullshit.
>>
In Australia we have NFC payment on our phones. Not Apple pay bullshit.
>>
>>47788554 (cont'd)
PS: You can't easily "steal" the card with NFC, but you could quite possibly authorize a transaction IF there is a "cash" aspect to the card.

If it's just a contactless way to read the chip before you have to enter a pin anyways with no method of pin-less payment, the danger is of course quite low, but there also isn't much time to be saved as opposed to inserting the card briefly.
>>
>>47788505
Because the rest of the world isn't quite the same level of money grubbing jews that Americans are. And I imagine some of them came into credit cards later than the USA, so they're more likely to join into newer technologies.
>>
>>47788607
If there's an asshole in this situation it's Visa/Mastercard.

The whole chip+pin rollout is a way to push liability to vendors while still charging them the same transaction fees.

Because what are vendors going to do? Refuse credit cards. In the US, only hole-in-the-wall vietnamese restaurants will accept that level of survival.
>>
>>47788610
Fuck you faggot, this should have been mandated a decade ago. Get rekt faggot.
>>
>>47788408
>not just paying with your phone
>>
>>47788482
>I didn't get what the hell the pad meant when it said 'insert card'
Americans, everybody
>>
>>47788619
> Because the rest of the world isn't quite the same level of money grubbing jews that Americans are.
How come your banks aren't actually famous for that?

Somehow our 6% of national GDP banking sector contribution is world famous and everyone thinks we're just one giant bank.

But the USA can do not only Paypal and Visa and MasterCard, but also all those domestic small banks and grab quite ridiculous percentages of money everywhere while offering pretty poor service - and it's not even part of the national image in some way?

> And I imagine some of them came into credit cards later than the USA, so they're more likely to join into newer technologies.
Maybe some didn't do Visa / MasterCard or such.

But everyone with banks had debit accounts, right...? I bet some of them had chips even before they had Visa / MasterCard in non-touristy stores.
>>
>>47788482
>Implying the average consumer makes a decision on security features
This failure to get with the times is because the companies didn't want to buy new tech despite old tech having issues.
>>
>>47788408
I live in Brazil and i've had chips on debit cards for ages, your US friend is probably just late to the party.
>>
>>47788474
>>47788505
>>47788597
It is so banks can make interest off of that money. Similar to americans having to file paperwork to get money the government owes them back at the end of the year after the government has made money on the interest.
>>
>>47788474
>Did you know in the USA it takes 3-5 days to process a banking transfer?
Not true

>>47788610
It's not a legal requirement, it's a shift of liability from the bank to the merchant.
You won't have to actually use chip and pin for many years.
>I just dropped $25k on new POS systems
No you didn't, even brand new EMV terminals are at most $750 a piece, and you're not replacing your POS systems, you're replacing the terminals.
If you have to replace your entire POINT OF SALE system, you're a colossal mongoloid.
>>
>>47789012
Yes, the average consumer would influence that decision if they felt uncomfortable switching over to it. Banks aren't clueless, and if focus groups or whoever find consumers wouldn't like it, that's just one more reason to not adopt it in addition to the upfront costs of adding new POS hardware, implementing it, etc
>>
>>47789074
True if you are a wells fargo customer. If it is less than 3-5 days it doesn't show up for the customer.
>>
>>47789055
Also not true.
A credit sale, in general, takes between 1-2 days depending on when that sale was batched and the authorization was captured.
A credit return takes between 2-5 days because it has to go through a much, much different banking network system to work. This is because consumer accounts and merchant accounts are wildly different in how they are connected to this system and handled. Taking money out of a merchant account needs a lot more checking than a consumer account.

Bank-to-bank transfers from consumer accounts are instantaneous at all major banking institutions.
>>
>>47789100
>Card they applied for comes in the mail
>It has a chip on it
>"Huh wonder what that is
Wow it's fucking nothing
Stop thinking /g/ is the average consumer.
>>
>>47789100
People however, are clueless. I've never once heard anyone be concerned about the security of NFC or scammers. This is a country where it's common to get skimmed just swiping your card.
>>
>>47789074
Look up the settlement times
EMV standards are related to NFC

>>47788735
>>47788617
>>47788574
The Contactless Chip while secure is not very hard to clone

>>47788584
What?
>>
>>47789112
>>47789115
Yeah an authorzation is not an immediate thing
>>
>>47789174
I haven't caught a single whiff of batch-to-deposit timings changing with NFC or EMV.
Once its authorized its authorized, and gets added to the batch as normal. Shouldn't impact transfer times whatsoever.
>>
I briefly skimmed this thread so I may be reiterating some things others have posted, but I haven't really come across the important points.

The deal with American credit cards/banks is that America got into electronic/credit banking faster than anyone, more or less. That's why weird shit like American Express exists; it's a charge card, which means it's in some weird limbo between a debit and credit card; it simply predated the idea of pure credit cards.

So of course, fraud for this new medium hit America first, and has been hitting it hard ever since.

After numerous fiascos, American banks had to step it up, and continue investing in all kinds of fraud prevention and investigation. They got really, really good at it. While they couldn't prevent the fraud from ever happening (and it happens a shit ton), they could clean up the mess faster than banks in any other country. Seems inefficient, and it is, but they built the infrastructure, and they really don't want to just dump it all for this new fangled smart chip thing.

So the banks just pussy-footed around. In fact, they all pretty much stated that they wanted to skip smart chips altogether and just wait for total electronic payments to take over (e.g. google wallet or apple pay). They were banking (pun not intended) on being so late to the party that they wouldn't even have to show, basically.

But laws are now forcing them to comply, so, yay America I guess.

It's pretty sad when the premiere card company, Amex, doesn't even issue EMV chip & pin unless you specifically ask for it. They don't even offer chip & sig AT ALL yet.
>>
>>47789202
Yes it is. Depending on how your bank displays things and how much they want to fuck with you, you might not notice it or see it, but authorizations are immediate.
>>
>>47788459
This.

>>47788505
US had better established system for online transaction authorization before many foreign countries did.
>>
>>47789115
>Bank-to-bank transfers from consumer accounts are instantaneous at all major banking institutions.
That may be but it doesn't show up instantly for the consumer. Which is what I meant by it not showing up for the customer.

I completely agree the tech is there for it to be instant but the fact remains that checks cashed and transfers made do not show up instantly for the customer.

Like I said earlier, the bank holds onto it and plays with the interest made in that 3-5 day window.
>>
>>47789174
Modern NFC chips broadcast an account number different than the one printed on the card and a dynamic CVV3 value that cannot be cloned. You are such a faux authority it hurts.
>>
>>47789229
The settlement isn't immediate
No matter ACH/ETF
>>
>>47788408
We've hard chip and pin cards for a while but no one can use them because stores are too cheap to implement the readers. I think Amex has had the chips for a couple of years now
>>
>>47788612

Not with ANZ :(
>>
>>47789277
>US had better established system for online transaction authorization before many foreign countries did.
I'm sure it still surpasses most 3rd world countries'.

I think the issue might be that it works to lesser standards than any other G20 country or even Eastern Europe, though. That is quite silly for a really big 1st world economy.
>>
>>47789286
Again, I don't know what shit bank you're at but account-to-account transfers are not 3 to 5 days. And if they're consumer-to-consumer with the proper authorization, they are instant.
No transaction takes 3 to 5 days to complete unless the merchant intentionally delayed it, or it was held up on suspicion.
Whether or not it shows immediately is again up to whatever shit bank you use, authorized funds are immediately "taken" from your account and take 1-2 days to reach the merchant depending on batch timings.

Stop using such a shit bank.

>>47789305
Settlement != Authorization
Not even remotely
Authorizations are immediately and instantaneous, they are what verifies you have the money you promised to give the merchant and what holds that money against you at the bank.
Settlements are the actual transfer of money and that takes 1-2 days depending.
>>
>>47789292
http://www.mroland.at/fileadmin/mroland/papers/201308_USENIX_WOOT_slides.pdf

http://korben.info/wp-content/uploads/defcon/SpeakerPresentations/Lee/DEFCON-20-Lee-NFC-Hacking.pdf


Both EMV and NFC support the same ISO/IEC 14443 standard contactless payments
>>
I literally can't remember last time I paid for something with physical cash. Such is life for Norwegian oil Jews. You can even get terminals that connect to your phone so why would you want to carry disgusting physical cash? It's dirty, it makes it viable for criminals to steal your wallet, it degrades, etc.
>but m-muh privacy!
Maybe I'd you didn't live I a fucking un-regulated police state without digital privacy laws it wouldn't be such a problem.
>>
>>47789326
Yet some transactions take 2 full days to show up
>>
>>47789358
Again, that's entirely up to your piece of shit bank or the merchant intentionally having a delayed settlement time.
There's no guarantee it will only ever take 1-2 days, but that is the quickest time settlements can be run, and in general is how most people are set to operate.
>>
>>47789326
Wells Fargo. :/
>>
>>47789315
http://www.washingtonpost.com/business/economy/us-credit-cards-chipless-and-magnetized-lure-global-fraudsters/2014/01/21/6edd171e-7df3-11e3-9556-4a4bf7bcbd84_story.html
>But the conversion could take years to reach critical mass amid a squabble over who will foot the estimated $8 billion bill, and despite fears that scammers have been targeting the United States because of its outdated technology. U.S. credit card fraud rates, once the lowest in the world, have doubled in the 10 years since chip cards spread through Europe.
Basically, once Europeans switched, American credit/debit cards became the low hanging fruit, even for the eastern europeans that make skimmers and sell track data.

>first presentation: proxying
Well yeah, the problem is that you have to consistently act as a MiTM on the challenge which makes you easy as fuck for banks to spot and for the consumer to notice.

>EMV contactless
Nigger, that's another name for NFC. It has nothing to do with the contact chip in the card and was chosen for branding purposes. The contact chip is pretty secure (though it is subject to certain replay attacks). Any wireless tech without shielding can potentially be tricked by a man in the middle but dynamic challenges from the same terminal repeatedly that are fraud make it easy to spot.
>>
>>47789375
Do you work in the financial or banking sector
>>
>>47789396
After the first reply, the point of the post

>first presentation: proxying
was intended for >>47789339
>>
Why even have a chip? I've collected so many cards on my phone literally by swiping near your wallet. Even been to the Disney Epson center? I copied my card NFC and made my phone use it, surprising everyone.
>>
>>47789222

Interesting read.
>>
>Why can my tiny shit europoor country do an overhaul on an incredibly complicated system that deals directly with the money of a gigantic customer base?

Probably because the US is so incredibly and vastly large in comparison to wherever you're comparing it to.
For a bank to implement a system change they need to make sure that everything works absolutely fucking everywhere within the US. Every store, every city, every state. They also need to implement the proper back-end solutions within their system to make sure that it works and is secure.

It's not "muh jews runnin' muh banks" bullshit. It's entirely about scale and consistency.
That, and if I'd hazard a guess, the vast majority of all fraud is through online transactions, which has absolutely nothing to do with any "hardware security" on a credit card but is reliant entirely upon credit card number and CVV code.
>>
>>47789410
Ok.

>>47789396
Yes, it baffles my mind.

Again, not only the pretty competent and wealthy countries from the G20, but *Eastern Europe* itself had reasonably safe, chipped cards rolled out before you did. That's just silly.

Even more so since I'm pretty sure you pay more with cards than most do.
>>
>>47789490
>Probably because the US is so incredibly and vastly large in comparison to wherever you're comparing it to.
The EU is bigger in this regard, anon. More people, more houses, more shops, more GDP.

So this argument kinda falls flat immediately.
>>
>>47789522

The EU is not one gigantic country that all have to comply to eachothers standards.

It is a collection of countries with their own separate governments, funding, taxation, banks, etc.

Even for a bank operating within all of EU, it is much easier to implement change gradually in one country at a time in comparison to trying to implement it all at once in one gigantic clusterfuck. Which is what would be needed within the continental US.
>>
>>47789490
I really don't understand why most online transactions still use card number + CVV code instead of signing them with your card reader like you do when logging in on your bank's homepage. Is this America fucking with us again?
>>
>>47789540
>The EU is not one gigantic country
So that makes chipped cards and transactions even harder to get working, anon.

> that all have to comply to eachothers standards.
That's likely more the case in the EU than in the USA between states.

> Even for a bank operating within all of EU, it is much easier to implement change gradually in one country at a time in comparison to trying to implement it all at once in one gigantic clusterfuck.
... and besides, we're talking about just a technical problem. A chip rather than a magnet strip, together with a bunch of well-known widely used protocols like EMV.

You don't have to solve it on your own even, you can just buy the devices and their software and roll them out. This is actually supposed to be ridiculously simple for a first world nation...
>>
>>47789570
It is simple, you are arguing with a man blinded by "Freedom (tm)."
>>
>>47789570
>So that makes chipped cards and transactions even harder to get working, anon.

u wot.
A bank only needs to make them work one country at a time. With most countries and areas being smaller than a single US state.
All things infrastructure are infinitely more easy to solve on a smaller scale. This is how and why public transport in Europe is infinitely more viable than in the US

>That's likely more the case in the EU than in the USA between states.
That's not how that works. That's not how that works at all.
There's no border crossing between states, there's no real/huge overall governmental change, there's no infrastructure change. The way states work are wildly different than how countries within the EU operate.
It's also impossible to justify having a credit card system/infrastructure work properly in one state and not in a bordering state while is much more easily justified to have them not work properly in a neighboring country.

>... and besides, we're talking about just a technical problem. A chip rather than a magnet strip, together with a bunch of well-known widely used protocols like EMV.

Yes. Because you can just go "Hey, we're changing to this. You are required to have a new set of hardware in order to properly enact transactions within your establishment" and every store within the entire US will magically have it. Just absolutely magically.
Keep in mind, doing that isn't actually a location/store's problem. It's a banks problem. If they issue cards and a customer cannot use them at a location, the customer may end up just switching banks.

>This is actually supposed to be ridiculously simple for a first world nation...

Again, look at the scale.
You're asking why you can have a house cat perched up on your shoulder but not an entire tiger.
Nothing is that fucking simple.
Thread replies: 66
Thread images: 1

banner
banner
[Boards: 3 / a / aco / adv / an / asp / b / biz / c / cgl / ck / cm / co / d / diy / e / fa / fit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mu / n / news / o / out / p / po / pol / qa / r / r9k / s / s4s / sci / soc / sp / t / tg / toy / trash / trv / tv / u / v / vg / vp / vr / w / wg / wsg / wsr / x / y] [Home]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
If a post contains personal/copyrighted/illegal content you can contact me at [email protected] with that post and thread number and it will be removed as soon as possible.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com, send takedown notices to them.
This is a 4chan archive - all of the content originated from them. If you need IP information for a Poster - you need to contact them. This website shows only archived content.