Hacker News Reader

Comment by rogerbinns | Hacker News Reader

Chip only helps for cardholder present transactions. It doesn't help for other transactions such as online, over the phone, subscriptions etc.

View on HN

Well you can always try the India model which is Chip and Pin for cardholder present transactions and mandatory two factor authentication for online. One result of this strict policy though is automatic subscription card billing is essentially illegal.

You can only pay online with debit cards if you use two factor authentication in Europe (eurozone). It's basically free though (cash is more expensive to handle), unlike credit cards.

Verified by Visa/3d secure? It's not exactly two factors, it's just more tedious data entry you have to do. And I've got it turned off on my card.

Actual 2fa would be great. I was wondering about the enourmous amount of work that would enable websites to support contactless ..

No, the processor will redirect you to the page of your bank where you need to enter a code sent by sms by your bank. This is true 2fa, it works at least with all Russian banks I've used and I'm sure it works in EU the same way (I thought it was like that everywhere in the world?)

Nope. UK Mastercard, no verification or 2fa. I guess we're not as secure as Russia in this case!

That page always sketches me out, to boot. Could they have made it look/behave more like a phishing scam?

My EU banks (Sweden) implement 3dSecure with either a 2FA phone app or a physical chip card reader that signs a one-time code. Real 2FA.

My Austrian bank has actual 2FA and pretty sure that is nandatory in the eurozone for new cards.

Reply on news.ycombinator.com