Live data from Hacker News

Plastc Card

plastc.com

11–20 of 356 posts

Re: Plastc Card

#11
I really like the idea, but at $155 this is a luxury item for people who have disposable income. Also, with the release of Apple Pay, I truly think eventually all brick and mortar businesses will support paying with your phone.

Re: Plastc Card

#12
post #2

Wow, this will certainly give Coin ( https://onlycoin.com/ ) a run for their money.

Important difference: Plastic supports Chip & Pin, Coin does not. Plastic: https://www.plastc.com/card#tech-specs Coin: https://onlycoin.com/support/faq/#security

How they will support chip and PIN? Will they need cooperation from the issuer? If not, then they need to clone the cryptographic keys inside the chip, and I thought those were supposed to be tamper resistant.

Re: Plastc Card

#13

1) The process of selecting a card and paying appears to have many more steps compared to merely selecting the appropriate physical card and using that. Is the sell here something to do with security (not displaying the card number all the time)? Does this support temporary/ burner numbers? 2) I would like to know what target demographic, if any, that that ad was not intended to irritate.

The prospect of getting away without a wallet is exciting to me! If I could get down to just driver's license, this, and billfold, that'd be pretty cool.

Re: Plastc Card

#14
Reprogrammable stripes have been around for a while, and while this is a more attractive implementation the new EMV rollout (accelerated likely by the recent card breaches) will make this impractical. You can't reprogram an EMV.

Re: Plastc Card

#15
post #4

Looks interesting. Was thinking of waiting until a v2 just to let them work through security issues. Seems like the website itself has some front-end glitches - like the "About" page for example (this code visible: )

Sorry yeah my bad, was in the middle of re-writing git history when this got pushed, took a few minutes to revert :) No security problems on frontend, in fact it was the parser protections which kicked in, preventing <?php from parsing etc.

Re: Plastc Card

#16
They say this supports chip-and-PIN, but I don't believe them until they explain how. If I have a chip-and-PIN card from my bank, the chip has an unreadable secret used to generate one-time cryptograms to verify the authenticity of the card. There's no way to get that secret onto my Plastc card. You'd need partnerships with banks to get a new secret the way Apple Pay does. Without those, this sounds like it'll be useless once the chip-and-PIN switch happens in a year or so.

Re: Plastc Card

#17
How in the world would remote wiping a lost card work? It only supports bluetooth from what I can find, so you'd have to be nearby?

Re: Plastc Card

#18
Product description describes remotely wiping from your mobile phone ...

How do they propose doing that ?

Re: Plastc Card

#19
post #17

How in the world would remote wiping a lost card work? It only supports bluetooth from what I can find, so you'd have to be nearby?

I'm guessing it pairs with your phone, and automatically wipes once it disconnects (maybe after some timeout).

Re: Plastc Card

#20
post #16

They say this supports chip-and-PIN, but I don't believe them until they explain how. If I have a chip-and-PIN card from my bank, the chip has an unreadable secret used to generate one-time cryptograms to verify the authenticity of the card. There's no way to get that secret onto my Plastc card. You'd need partnerships with banks to get a new secret the way Apple Pay does. Without those, this sounds like it'll be use…

That's exactly what I came here to say - if this can do chip and PIN, then can't we assume chip and PIN is broken? Cloning a mag stripe is trivial, cloning chip and PIN should be as close to impossible as is feasible.
Post reply on HN