Live data from Hacker News

Poynt – Smart payment terminal

getpoynt.com

41–50 of 81 posts

Re: Poynt – Smart payment terminal

#41
post #15

This is the first EMV payments terminal I've seen that allows PIN entry using a touch screen. Is that really allowed by EMV, as a tamper-evident PIN pad?

Exactly what i was wondering. RBI (Reserve Bank of india) does not allow entering PIN's on touch screen. Infact they (RBI) go to such a length that a card processing terminal should be ONLY just the terminal and the hardware should be approved by the RBI which might take months.

Re: Poynt – Smart payment terminal

#42

Earlier quoted context omitted.

The business model relies on a monopoly, an information monopoly. If the mass's interaction at POS is with a software or a hardware that potentially allows id-ing the patron, preferential pricing becomes possible, security is anon issue -- it seriously damages the value of the middleman. So that the secure element(yeah right) that's on your plastic or your phone only communicates with OSes and HW that limits the ID-i…

If privacy were really the concern, people would pay with cash. They always have, and always will. It is accepted everywhere, is the definition of liquidity, and is virtually untraceable. At best, in-person swiping of physical credit cards is a compromise that people make that gives away some of that privacy (your card provides your name, and can be used to verify your address) in exchange for something more valuable…

How many different merchants to do you deal with on a regular basis?

What is the risk of fraud or of bad product and or bad vendors when both ends know each other? Why introduce a 3rd party in those transactions that gives back a fraction of its fee to the payer? (5) Instead why not reward repeat business with preferential pricing? (not directly possible but attempted via loyalty programs that cost a lot to deploy)

The credit is provided by the issuing bank (4). It can exist independently of the credit card network.

And with any electronic means, 1 is pretty much a given.

Credit 3rd parties still have a reason d'être if a solution that shortcuts VISA and MC when both ends know each other catches on. A Credit 3rd party is needed as an insurance policy when two unknown parties do a transaction; that insurance is bound to cost more than today given less volume; but it could be efficient if pricing would be market driven instead of diluted in 100-1 day to day transactions.

Thanks to the down voters, BTW. Again HN is showing openness to look at things from a totally non conventional angle. I think I'll log off for good. So long, and thanks for all the fish!

Re: Poynt – Smart payment terminal

#43

If someone from Poynt is on, what are the features that make this better than competing products? I've used Shopify for doing some PoS setups, but I'm having a hard time looking at where Poynt fits in. Other than being cheaper, it lacks some of the things that make Shopify great, namely cash handling and connecting to a back office system.

Hi, I work for Poynt on the PoyntOS and applications. First thing first, Poynt Smart Terminal is a Secure Payment Terminal at the core that provides credit card payment processing functionality to any merchant that needs to accept payments in their stores. This is analogous to the traditional payment terminals that you might probably notice every day at a lot of merchant stores (cafes, salons, grocery stores, etc.).…

Should definitely highlight (at least to the HN crowd) that this is an Android device and you're exposing some APIs that can be built on. This is really cool.

Re: Poynt – Smart payment terminal

#45
post #31

Earlier quoted context omitted.

[deleted]

Doesn't it make it easier to spy? Because you know where the numbers of the pin are located, you don't even need to look at the keys, but can easily cover it with your hands to prevent "shoulder surfers". If I have to look where the keys are located, I can't really cover the pad and it'll be a lot slower and not more secure.

I've always felt like it's harder to spy on an LCD screen due to the limited viewing angles as opposed to physical buttons. And the physical layout of the PIN pad should be similar so it should be a smooth transition. The device will also be PCI PTS approved so it will be on par in terms of physical and logical security.

Re: Poynt – Smart payment terminal

#46
post #40
post #20

I'm unable to watch the video from my Android phone.

Hi, thanks for letting us know -- are you still having problems? We enabled the embedded video on mobile devices a little while ago.

It works fine when I open the page with my phone held vertically. When I hold the phone horizontally the button doesn't seem to work though.

Opening the video with the phone held vertically and then rotating the phone once the video loads works fine, however.

Re: Poynt – Smart payment terminal

#47
post #38

What's to stop somebody from stealing this right off the counter and gaining access to customers' data?

A very valid concern. To begin with, while our terminal is Android based we have taken numerous steps to lock this device down. Side loading apks is not possible nor is arbitrary access via adb. On top of that, we take great lengths to protect consumer data. In addition to full PCI compliance data is fully encrypted on the device. And if that's not enough, there are several anti-tamper mechanisms that will trigger an…

You are not PA-DSS or PCI certified. Where are the links to your letters of approval?

Re: Poynt – Smart payment terminal

#48

What's to stop somebody from stealing this right off the counter and gaining access to customers' data?

I was wondering this too. Somebody could swipe the system straight from the counter and cripple sales for a while. Surprised to not see a Kensington lock on there.

Re: Poynt – Smart payment terminal

#49
This device is insecure. It is going to take a long time to get the PCI/EMV certifications. Besides that how do you handle the certification of new applications running side by side with your payment application? Everytime you deploy a new application you should re certificate the entire stack, by the PCI standards. Nice concept, but you have a long road ahead before competing with VeriFone, Ingenico, PAX, Miura shuttle and others.

Re: Poynt – Smart payment terminal

#50
post #38

What's to stop somebody from stealing this right off the counter and gaining access to customers' data?

A very valid concern. To begin with, while our terminal is Android based we have taken numerous steps to lock this device down. Side loading apks is not possible nor is arbitrary access via adb. On top of that, we take great lengths to protect consumer data. In addition to full PCI compliance data is fully encrypted on the device. And if that's not enough, there are several anti-tamper mechanisms that will trigger an…

Assuming that someone managed to not only walk off with the device from a retailer but were also able to gain access to the device itself. What kind of data could be harvested from the device?
Post reply on HN