Hacker News Reader

Comment by derefr | Hacker News Reader

You say that as if it would be a CapEx-laden technological hurdle for Visa, MasterCard, etc. to implement chip-and-pin.

But these same companies are already issuing 100% chip-and-pin (plus tap) cards in every market other than the US.

If you want to blame anyone, blame the vendors of US ATMs and POS systems. Without their support, and a willingness to push through a deprecation/replacement of older hardware, chip-and-pin cards are pointless, because nothing reads them. (I would know, as a Canadian with a chip—and-pin card who frequently visits the US.)

View on HN

This must be regional because I have been using a chip-and-pin card for the last 5 years and I cannot for the life of me remember the last time I had to physically swipe the card. Tap support is definitely still spotty but that is something that is more of a convenience than a security issue

I also can't remember the last time I had to swipe a card where I am in the US. I also prefer using Apple Pay, and tbh, can't remember the last time I had to use my physical card.

It's still relatively common to have to swipe cards at gas stations in the US when you're buying gas. And a fair amount of the parking meters may still be on swipe (NYC meters outside of Manhattan come to mind). The places that haven't upgraded are ones with a lot of POS stations to upgrade.

Yep these two places are very common to be swipe only. I have to go a human teller at <massive and famous hospital> to pay for parking and the cc machine will still only read swipes.

Also US based here, and can't remember the last time I had to swipe.

There are even places with no swipe, where we can only use chip.

> But these same companies are already issuing 100% chip-and-pin (plus tap) cards in every market other than the US.

Citation please? I haven't seen a non-chip-and-pin card issued here in the US for at least 5 years (probably even longer), and that includes my tiny local bank..

Yep, the rules were, for chip and pin fraud, the liablility was no longer on the retailer, but still was for swipe fraud. So there was a HUGE push from retail customers to get chip-and-pin in place to cut down on the amount of chargebacks, etc.

https://pointofsale.com/chip-card-vs-magnetic-stripe-card/

As recently as three years ago I still had two (ATM/Visa Debit) cards with no chip. They were both issued by credit unions. I know this was after the 10/1/2015 "deadline" (https://www.nbcnews.com/tech/tech-news/what-october-1-chip-a...), but I think debit cards were given a later deadline.

None of my cards are chip-and-pin, they are chip-and-sign (i.e. it's via a chip reader, but no PIN is required to pay)

Chip and pin is distinct from chip. I have ~5 credit cards. At least 4 of them support tap to pay.

They all have chips. None of them have chip-and-pin.

Er, how often do you visit? We've had widespread chip-reading terminals in the US for almost a decade.

The ones which are widespread are just "chip-and-choice", where you can use the chip and sign a paper receipt. They usually come with a magstripe backup...the chip is just used to read the card number instead of the magstripe. Pretty worthless.

True chip-and-pin cards and terminals will generate a cryptogram that authenticates the individual transaction. You type in the PIN code, and only then will the terminal communicate with the EMV microchip in the card and allow the transaction to complete.

Is there a difference in the user experience? Because everywhere I use my debit card, I can’t take it out unless I enter my pin first. I’d assume that means it’s actually communicating with the chip. And even then it takes a few seconds.

The magstripe is there for old POS systems and the off chance the chip can’t be used (dirty contacts), but the reader has to allow you to use the strip. And that only happens after multiple (about 3) failures.

Doesn’t matter. Chip-and-signature is an EMV compliant way of authorizing a transaction.

right. We have Visa / Mastercard cards with chip and pin in France since the 90´s

I always thought that its absence in the US (until pretty recently) was a cultural thing, not a technical thing.

Reply on news.ycombinator.com