<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 2016-04-04 10:54, William Flynn Wallace wrote:<br>
<blockquote
cite="mid:CAO+xQEZ7O-zCsb-+OsyCg1Nb9O5==bjX2SG-oW2UtawiMYvVTw@mail.gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div class="gmail_default" style="font-family:'comic sans
ms',sans-serif;font-size:small;color:rgb(0,0,0)">Anders - <span
style="font-size:12.8px;font-family:arial,sans-serif;color:rgb(34,34,34)">The
problem with credit card numbers is that currently we use
security by obscurity: much of your protection comes from me
not knowing your number, rather than restrictions on how I
can use it. A good authentification system would make
knowing your card number useless to me, just as me knowing
your email address doesn't allow me to hack your mail server
(some extra authentification needed to ensure that I don't
forge emails from you).</span></div>
<div class="gmail_default" style="font-family:'comic sans
ms',sans-serif;font-size:small;color:rgb(0,0,0)"><br>
</div>
<div class="gmail_default" style="font-family:'comic sans
ms',sans-serif;font-size:small;color:rgb(0,0,0)">OK, I'll bite
- why don't they do that? bill w</div>
</div>
</blockquote>
<br>
I think part of it is the extra cost of chip-and-pin machines and
their certification, but also that people are strongly used to
certain ways of using the cards (like signatures) that make them or
issuing banks resist the new system. Plus that there is an issue of
whether merchants, banks or card companies should bear the cost:<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.usatoday.com/story/money/2016/02/17/survey-adoption-chip-enabled-credit-cards-falls-behind/80453906/">http://www.usatoday.com/story/money/2016/02/17/survey-adoption-chip-enabled-credit-cards-falls-behind/80453906/</a><br>
<a class="moz-txt-link-freetext" href="http://www.bankrate.com/finance/credit-cards/why-youre-still-swiping-credit-card.aspx">http://www.bankrate.com/finance/credit-cards/why-youre-still-swiping-credit-card.aspx</a><br>
<a class="moz-txt-link-freetext" href="http://www.latimes.com/business/la-fi-1221-credit-card-technology-20131221-story.html">http://www.latimes.com/business/la-fi-1221-credit-card-technology-20131221-story.html</a><br>
<a class="moz-txt-link-freetext" href="http://www.csoonline.com/article/3047178/security/chip-and-pin-adoption-still-slow.html">http://www.csoonline.com/article/3047178/security/chip-and-pin-adoption-still-slow.html</a><br>
<br>
Upgrading any existing tech infrastructure is always painful. When
people have differing incentives it is even tougher. <br>
<br>
<pre class="moz-signature" cols="72">--
Anders Sandberg
Future of Humanity Institute
Oxford Martin School
Oxford University</pre>
</body>
</html>