Banking

A while back I learned that Microsoft had won a lot of contracts in various countries to supply their banks ATM machines. This sent a shiver down my back that so many people whose primary responsibility is to think about customer security would be stupid enough to sign a contract with Microsoft to have Windows as the underlying OS on their ATM kiosk software. I had hoped (rather naively as it turned out) that these contracts wouldn't be in the UK.

Some people joked that my Chip & Pin views are a bit more tinfoil hat, than in step with the banks ideas. A news story from the BBC today highlights exactly what I said, is actually affecting everyday users. This was the pay-off for the banks, it was the prime reason behind the push to force Chip & Pin onto every customer; to blame them for fraudulent transactions and refuse to repay it.

For those who don't know, "Chip & Pin" is an authentication system brought in by the banking industry in the UK to (in their words) reduce fraudulent activity on their customers accounts. Previously people authenticated themselves by signing their name, now they're expected to slip their card into the reader on the counter and enter their pin number, which (in theory) only they know. The "Chip & Pin" wiki page has a much more expansive explanation. I have three main issues with Chip & Pin.