> However, note that the PIN is useless without the card, because the crypto chip is on the card, and it can't be cloned by a reader.
Ahh. So then the merchant could only really make use of a pin (which it would have to do by compromising the pin reader--a tall order for small time crooks) if he also stole your physical credit card. I agree that this isn't much of a risk, and retract that criticism.
Comments
> However, note that the PIN is useless without the card, because the crypto chip is on the card, and it can't be cloned by a reader.
Ahh. So then the merchant could only really make use of a pin (which it would have to do by compromising the pin reader--a tall order for small time crooks) if he also stole your physical credit card. I agree that this isn't much of a risk, and retract that criticism.