sling-shot
Wise Old Owl
Recently our esteemed RBI has made it compulsory to enter PIN for all debit card based transactions at merchant establishments. I feel this was a move thought of in a meeting room with complete disregard to the actual usage scenario.
PIN is the one immutable, really secret data regarding our card. Because almost all other data can be easily obtained by different methods eg. Name, card validity, CVV number, date of birth (every tom dick and harry website, local shop with membership wants your DOB), mobile number etc. PIN then becomes the only really secret authentication that remains in your control. (Mobile OTP is almost useless in many situations because your wife/close family /close friends may have physical access to your phone)
Now these guys had to go and force us to enter this PIN at various public places where one could be easily observed unknowingly and also recorded for later playback/number guessing. No method of easily obscuring this process of PIN entry will work. Or else you will have to do odd things to protect your PIN possibly provoking people to think either you are a loon or you have multiple crores in your account making a nice target.
I am scared to use my card anymore.
PIN is the one immutable, really secret data regarding our card. Because almost all other data can be easily obtained by different methods eg. Name, card validity, CVV number, date of birth (every tom dick and harry website, local shop with membership wants your DOB), mobile number etc. PIN then becomes the only really secret authentication that remains in your control. (Mobile OTP is almost useless in many situations because your wife/close family /close friends may have physical access to your phone)
Now these guys had to go and force us to enter this PIN at various public places where one could be easily observed unknowingly and also recorded for later playback/number guessing. No method of easily obscuring this process of PIN entry will work. Or else you will have to do odd things to protect your PIN possibly provoking people to think either you are a loon or you have multiple crores in your account making a nice target.
I am scared to use my card anymore.