Japan facing credit card number shortage

Post by GoblinSlayer » Wed, Aug 26, 2020, 11:21 AM UTC

xxpor wrote: post #56

toomuchtodo wrote: post #10

Earlier quoted context omitted.

I’m honestly surprised the move to contactless hasn’t occurred faster, as the costs for hardware seem lower for nfc versus chip.

In the US retailers don't want to lose customer tracking they can do with fixed card numbers. This is why you see nonsense like "Kroger Pay" and other store specific payment apps. The hardware exists in nearly every terminal that supports EMV (Chip and pin/signature), the retailers just haven't turned it on. Meanwhile, with my Samsung phone and its mag strip emulation, I can use my phone nearly everywhere anyway even…

Post by GoblinSlayer » Wed, Aug 26, 2020, 11:31 AM UTC

hinkley wrote: post #31

toomuchtodo wrote: post #10

Earlier quoted context omitted.

I’m honestly surprised the move to contactless hasn’t occurred faster, as the costs for hardware seem lower for nfc versus chip.

For consumer commerce, between the contactless and the smart chips this should be solved. Someone else said the number is 'hidden' from the users but it's not hiding versus not hiding that's the problem. It's that for e-commerce the human has to transcribe the number by hand. You can't hide it, except via another system.

Post by GoblinSlayer » Wed, Aug 26, 2020, 12:06 PM UTC

michannne wrote: post #24

jandrese wrote: post #16

Earlier quoted context omitted.

The identifier is hidden from the user so if it's huge and complex that is no problem. My point is that we're talking about putting a lot of effort into overhauling the system to support a scheme that is arguably already obsolete. If we're putting in the effort we should just remove the old insecure digits entirely and focus on a cleaner modern solution.

The problem with that is the purpose of a credit card system is convenience, especially the convenience involved in being able to represent the identifier in an easily compact manner. When it's a few groups of digits, I can print it onto a card or piece of paper, and just plug the digits in whenever I need to validate the number and run a transaction. You can't do that with a token. What happens when I want to use my…

Post by iso1210 » Wed, Aug 26, 2020, 12:26 PM UTC

mrjin wrote: post #296

iso1210 wrote: post #270

Earlier quoted context omitted.

There's far better ways to do it if you can use online - I submit my card number to them, they pass the card number, their account number, and the amount to my provider, I authorise they payment with my provider. If you're doing it over the phone though things like public key won't really work - to be long enough would make the numbers impossible to read out reliably, let alone the calculation I would need to do with…

Nah, think again, in either the merchant's or bank's perspective: how can they tell you are really who you claimed to be? That's the core question and why all the hustle. And again, even some design can perfectly solve that problem, there are additional problems to resolve: how to implement that change with reasonable cost, within reasonable time frame and with good user experience? And most importantly, does not bre…

Post by seppel » Wed, Aug 26, 2020, 12:32 PM UTC

pxtail wrote: post #290

seppel wrote: post #254

Earlier quoted context omitted.

And its super annoying. I bail out when I'm asked to do that.

It may be annoying if one is not used to take care about own transactions safety and is willing to shift this responsibility to some other entity - of course this convenience has a cost.