undefined | Better HN

0 pointsacdha2y ago0 comments

> We’ve had both of these tools for over 20 years now. It’s just a question of how much the industry is choosing to cater to convenience and backwards compatibility, i.e. a security/availability trade off.

Exactly: it’s not like this was a technological breakthrough but that companies were trying to avoid breaking backwards compatibility - not just things like the readers but backend payment systems using something like fixed length records, but also restaurants needing to stop having a single terminal used for every table (this is why they went chip and no PIN).

Going back to the original comment, that’s the peace of mind benefit I see: those businesses can slack on security without me getting stuck with a potentially massive bill.

0 comments

lxgr2y ago

> that’s the peace of mind benefit I see: those businesses can slack on security without me getting stuck with a potentially massive bill.

That's a false dichotomy, though: Regulators can mandate merchants and issuers to make fraud less likely without allowing the liability for any remaining fraud to be pushed onto cardholders.

acdhaOP2y ago

That doesn’t make it a false dichotomy. We have an existing regulatory model which absolves consumers of most fraud risk, and many people like that.

lxgr2y ago

Sure, and maybe I'm misunderstanding you, but your point is that changing that model might make things worse for consumers by pushing more liability onto them, right?

I'm just saying that this isn't necessarily a consequence of improving fraud rates, although it's definitely important to keep an eye on issuers – I've heard about attempts to use it as an opportunity to limit liability in the past.

j / k navigate · click thread line to collapse

0 pointsacdha2y ago0 comments

Going back to the original comment, that’s the peace of mind benefit I see: those businesses can slack on security without me getting stuck with a potentially massive bill.

0 comments

lxgr2y ago

> that’s the peace of mind benefit I see: those businesses can slack on security without me getting stuck with a potentially massive bill.

That's a false dichotomy, though: Regulators can mandate merchants and issuers to make fraud less likely without allowing the liability for any remaining fraud to be pushed onto cardholders.

acdhaOP2y ago

That doesn’t make it a false dichotomy. We have an existing regulatory model which absolves consumers of most fraud risk, and many people like that.

lxgr2y ago

Sure, and maybe I'm misunderstanding you, but your point is that changing that model might make things worse for consumers by pushing more liability onto them, right?

j / k navigate · click thread line to collapse