Mastercard No PIN or Signature required

[WMGroomAK]

Mastercard has decided to begin testing a system to do away with PINs or requiring a signature for your credit card purchases.  Their solution, use a fingerprint.  Now this isn't something like NFC verification with the fingerprint scanner on your phone, but actually having a built in fingerprint sensor on the edge of the card to use.  According to an article on TechSpot:

 

http://www.techspot.com/news/69028-mastercard-testing-credit-cards-embedded-fingerprint-sensors.html

Quote

Setting up one of these cards won’t be as simple as using an app. Assuming your financial institution decides to use the system, you’ll need to visit an enrollment center to have your fingerprints scanned. An encrypted digital template will then be stored on the card’s EMV chip. It’s possible to have two prints on the same card, though they must both belong to the owner – you can’t add other people’s fingerprints.

Assuming the current testing in South Africa goes well, they are hoping to roll this out to Europe and Asia later in the year and maybe worldwide before the end of 2017.  Some issues I can see, this may not be as secure as they are assuming considering I've seen quite a few videos on fingerprint sensors being overridden.  Another issue I can think of is the durability of the sensor.  I know that my card usually looks in bad shape after about a year or two in my wallet.

[pbx2]

Why South Africa of all places

[MorganO]

1 hour ago, pbx2 said:

Why South Africa of all places

why not?

[tlink]

i hope this fails miserably, its a bad plan all around. if they did this AND a pin code i would be kinda okay with it.

[pbx2]

Just now, tlink said:

i hope this fails miserably, its a bad plan all around. if they did this AND a pin code i would be kinda okay with it.

If it was optional like contactless in the UK, also allowing 2FAuth would be amazing

 

[tlink]

2 minutes ago, pbx2 said:

Why South Africa of all places

because they like Die antwoord

[zMeul]

how would I give the card to a family member if it only allows my fingerprints?! did MasterCard went that retard 

[pbx2]

Just now, zMeul said:

how would I give the card to a family member if it only allows my fingerprints?! did MasterCard went that retard 

That's not really the intended use of the card though.

[WMGroomAK]

1 minute ago, zMeul said:

how would I give the card to a family member if it only allows my fingerprints?! did MasterCard went that retard 

That was one of my thoughts on this.  My best guess is that maybe they want you to chop off your finger...  

[tlink]

Just now, pbx2 said:

If it was optional like contactless in the UK, also allowing 2FAuth would be amazing

 

no not optional, just 2fa or only pin. bio metrics are not a good security practice unless they are combined with a pass code of some sorts. with contactless you can just lower the amount so it still requires pin which is great, no physical wear and tear on my card and im still a lot quicker.

[zMeul]

Just now, pbx2 said:

That's not really the intended use of the card though.

not intended!? you can have cards with a owner and a family member(s) as authorized user

[JAKEBAB]

What happens when your gf, family member, friend etc is going to the shop for you or paying for fuel while you fill up the car? Idk how i feel about this.

[WMGroomAK]

1 minute ago, pbx2 said:

That's not really the intended use of the card though.

It might not be an intended use, however there are people who do lend their cards to their spouse or kids for purchases.  Seems like a limiting factor that Mastercard may want to address.

[tlink]

2 minutes ago, zMeul said:

how would I give the card to a family member if it only allows my fingerprints?! did MasterCard went that retard 

 

Just now, JAKEBAB said:

What happens when your gf, family member, friend etc is going to the shop for you or paying for fuel while you fill up the car? Idk how i feel about this.

just 3d print a backup finger dudes, the future is now

https://fusion.net/police-asked-this-3d-printing-lab-to-recreate-a-dead-ma-1793860413

[GeekJump]

No..no...NO!

 

Didn't we learn from switching to chips? Most people are stupid! I don't want to wait at check out again while someone is fumbling with their fingerprint secure card at the register. NOT AGAIN!  Plus this time the cashier can't take the card and show them how to do it because they need their fingerprint. And, besides the fact I don't think this card will be as thin as current cards, I bet people would still need to sign or something. I remember when chips were introduced and they talked about not needing to sign or put your pin in anymore...the chip takes 2x longer than the old fashion swiping. Security be damned!

 

Then if the sensor gets dirty...more wasted time.

[Orangeator]

2 minutes ago, GeekJump said:

the chip takes 2x longer than the old fashion swiping

Um no... More like 4-5x longer.

[tlink]

7 minutes ago, GeekJump said:

No..no...NO!

 

Didn't we learn from switching to chips? Most people are stupid! I don't want to wait at check out again while someone is fumbling with their fingerprint secure card at the register. NOT AGAIN!  Plus this time the cashier can't take the card and show them how to do it because they need their fingerprint. And, besides the fact I don't think this card will be as thin as current cards, I bet people would still need to sign or something. I remember when chips were introduced and they talked about not needing to sign or put your pin in anymore...the chip takes 2x longer than the old fashion swiping. Security be damned!

 

Then if the sensor gets dirty...more wasted time.

the swipe was ridiculously easy to copy, a 3 bucks device can copy it in a second. you effectively would've removed the security a card gives.

 

[GeekJump]

1 minute ago, Orangeator said:

Um no... More like 4-5x longer.

let me keep my rose-colored glasses on please. 

 

like those places they still haven't replaced there old beat up readers. You put your card in and wait about 5-10 seconds between each prompt. When I go to this local store the line is always super long because people are using cards and it takes about a minute per person to pay. I only carry cash still for THAT store lol

1 minute ago, tlink said:

the swipe was ridiculously easy to copy, a 3 bucks device can copy it in a second. you effectively would've removed the security a card gives.

I understand the reasoning - I like my money not stolen to. But, they should at least improve the system. Chipped cards have been widespread in the US long enough that I shouldn't spend so much time paying. The walmarts by me all upgraded their registers and cc readers but it still takes wayyy to long. When I lived abroad I literally tapped the machine and *boom* receipt. 

[crysilis]

isn't it just like paying with your phone

but without your phone

seems kinda pointless imo

because dont you use a fingerprint scanner for stuff like apple pay?

[tlink]

2 minutes ago, crysilis said:

isn't it just like paying with your phone

but without your phone

seems kinda pointless imo

because dont you use a fingerprint scanner for stuff like apple pay?

you have to understand that apple pay is their direct competition.

[Orangeator]

2 minutes ago, crysilis said:

isn't it just like paying with your phone

but without your phone

seems kinda pointless imo

because dont you use a fingerprint scanner for stuff like apple pay?

Android and Apple Pay still seem WAAAYYYYYY more secure to me vs using cards.

[goodtofufriday]

Part of my job deals heavily with secure entry systems. 

 

Finger print tech that can be mass deployed is not there yet. 

And the liability involved with being hacked for those prints is just not feasible. 

You cant change a finger print! 

[GeekJump]

5 minutes ago, goodtofufriday said:

Part of my job deals heavily with secure entry systems. 

 

Finger print tech that can be mass deployed is not there yet. 

And the liability involved with being hacked for those prints is just not feasible. 

You cant change a finger print! 

well we got 10 chances before we're s.o.l 

[iRileyx]

1 hour ago, pbx2 said:

If it was optional like contactless in the UK, also allowing 2FAuth would be amazing

 

Funny thing is its only optional if you specifically ask for a non-contactless payment card. They don't ask if you want contactless or not, just send that one automatically unless you ask for one without it. (Experience from my bank anyways)

[Belgarathian]

1 hour ago, pbx2 said:

If it was optional like contactless in the UK, also allowing 2FAuth would be amazing

 

I like where you're going with that. Using your banking app, you can set authorization limits. 

 

• $50 and under, pay way approved
• $51 to $200, requires pay wave and pin/finger print 
• $201 or more requires 2FA using notification from banking app on phone