Live data from Hacker News

A simple solution to credit card fraud, and why you won't see it any time soon

blog.rongarret.info

1–10 of 130 posts

Re: A simple solution to credit card fraud, and why you won't see it any time soon

#3
Citi has offered virtual account numbers for its credit cards for a while, which solves the "Once someone knows your card number they can use it to conduct any transaction they choose" problem. It's still a hassle to remember to go to citicards.com and generate a new number, provided that Chrome helpfully auto-fills your saved number.

Re: A simple solution to credit card fraud, and why you won't see it any time soon

#5
If you look at how they were actually deployed in Europe, you'll realize that it's not much different over there. "Chip and Pin" is if anything worse than no encryption, because it gives the illusion of security. I don't know about the situation in Asia.

Re: A simple solution to credit card fraud, and why you won't see it any time soon

#6
So...what's the solution?? "Use public key encryption" doesn't help us much. Especially when you claim "it's not hard". Disposable numbers have been tried many, many times and the user experience stinks. Maybe with the prevalence of good mobile experiences, their time has come?

Re: A simple solution to credit card fraud, and why you won't see it any time soon

#7
The financial companies are the most technology adverse group out there. They are risk handling and money moving engines and not interested in innovation. Every advance in technology is a direct result of legislation (like the recent addition of check scanning at ATMs) and legislation never follows the cutting edge.

Re: A simple solution to credit card fraud, and why you won't see it any time soon

#8
If the the card brand, say Visa, would generate a public key that I could use on my web server to send them their credit card data, then I, my payment gateway, and maybe even my even my merchant bank, would never have to know the card number. VisaNet could decrypt it on their side with their private key and determine the issuer and account information to process it. Just the customer and VisaNet and the issuer probably needs the card number itself. Everyone else just needs to know the result of the transation.

Re: A simple solution to credit card fraud, and why you won't see it any time soon

#9
Feels like over-reactive writing. Of course big business works to protect its interests and offload costs of business to customers. Big business is also terrified and highly resistant to change to systems that are generating profit that may reduce profit, regardless of any social value.

Why is this so shocking to the author?

Post reply on HN