MikeW

Midlands, UK

Developer

A problem with some Chip&PIN terminals - the card is apparently swiped by the retailer, then the customer is asked to key the PIN into a keypad.

Making this behaviour acceptable to the customer is idiotic.

A disreputable retailer could swipe-read the card magstripe, then obtain the PIN from the keypad entry, giving him everything required to access an ATM, since ATMs don't yet appear to have Chip readers.

Customers should only ever enter their PIN into the keypad reading their card - the card should NEVER be swiped if you are entreing your PIN.

Marks and Spencer have this kind of terminal, and the manufacturers should be reprimanded for failing to appreciate the potential for security breach that they might be encouraging.