Chip and PIN

Thursday, November 20th, 2008

Part of the problem with Chip and PIN is the logo.  It subliminally tells you to use one out-stretched finger to type in your PIN, in full view, as clearly as possible to any onlookers.

This seems to be the wrong message.  There are plenty of things wrong with Chip and PIN, but mostly it isn’t an intentional lowering of security. (In fact it mostly seems to be about shifting liability onto the consumer).  But this logo doesn’t even seem to be trying to get it right.

(more…)

Utility companies and passwords

Friday, November 7th, 2008

Ever since I heard it was possible I’d been meaning to set up passwords with my utility companies so that they can verify their identity to me when they turn up at my door.  This week I tried it with my gas supplier.  They said they don’t do that, but don’t worry, it’s fine, I can just check their ID card and phone up to verify that the name on the ID card is one of their employees/contractors.

(more…)