I made a statement of fact. I'm making no normative claims, I'm describing reality. At this point in time, there is zero additional security provided by the implementation. Am I supposed to ignore reality and lie about it, because someday things will be better?
Saying "For now, there is zero incremental security" would be better. But it's not really zero since it protects against credit card cloning at a particular point of sale.
Eh. Humans don't generally qualify their statements that way when informally describing things. "Did Bob graduate college?" "His educational background may improve in the future." If you want me to sound like a PR-bot, you can pay me to write copy for you.
> protects against credit card cloning at a particular point of sale
A sieve stops water from streaming through at particular points in the mesh, too.
Applying for jobs my senior year of college was such a pain because of this. Why is there so often no degree option for "I will have my degree very soon".
I almost wish EMV-capable ATM's would stop holding the card captive until the magstrip is abolished, they're one of the best targets for skimmers so only inserting the card partially would help deal with magstripe readers attached to the machine. It's increasingly rare I go to a store that doesn't have the chip reader or NFC enabled, but every ATM I use still insists on eating my card.
ANZ bank in Australia has actually started rolling out Contactless ATMs.
Which is great, as even some chip ATMs you put the card in far enough to have a magstripe skimmer work on most cases (presumably so that they work with the magstripe cards also)
Not the case for contactless!
(Of course here in Australia, Chip+Pin is Universal and Contactless is near-universal... I can use Apple Pay almost everywhere even small shops and have been able to for several years.. different story to much of the world)
Now the one thing that annoys me, is that currently shops here despite having separate payment terminals customer facing (largely for pin numbers) still operate sometimes on you handing your card to them - which is totally not necessary - especially in drive throughs. This is getting less common with tap to pay using mobile phones as people are (somewhat amusingly to me, given the value potential) hesistent to hand their phone to someone versus their actual card. I really wish merchants would enforce hard not letting the shop assistants handle cards (at least, prompt to handle it, if someone really wants help I'm not against that, but I don't like the default expectation).
But I also realise this kind of thing is much more common in some places so your mileage and feelings may vary.
Even in Canada, where we’ve had the chip + pin for far longer, the ATM eats your card. After a certain amount of incorrect PIN attempts, or the bank flags the card, it will not release the card.
I made a statement of fact. I'm making no normative claims, I'm describing reality. At this point in time, there is zero additional security provided by the implementation. Am I supposed to ignore reality and lie about it, because someday things will be better?