From: "Tumbleweed" 
Newsgroups: uk.finance
Subject: Re: PIN fraud
Date: Sat, 17 Apr 2004 00:03:31 +0100


"john boyle"  wrote in message
news:Y41GInKlDEgAFwbp@johnboyle1.demon.co.uk...
> In message <407f020b$0$6163$afc38c87@news.easynet.co.uk>, Tumbleweed
>  writes
> >I am pretty sure the PIN isnt on the card, even encrypted, that would be
a
> >_really_ crap design,
>
>
> Hitherto, PINs have been held on the cards as ATMs and tills are not
> online to the issuing institution all the time.

No no no NO, PINS are _definitely_ not held on cards at present!! Usually an
ATM wont authorise if there is no connection, its up to a retailer whether
or not to if there is no connection, or if the cost of the connection is
more than the perceived risk, this is why they have floor limits.

>
> Im not sure that PINs on C&P are NOT on cards. If they werent then
> transactions could not be performed with a permanent link to the
> provider, as opposed to a link to an 'authoriser'.
>

Of course transactions can be performed without being on line, its  just
that the retailer takes the risk if they arent.

-- 
Tumbleweed

Remove my socks for email address