FBI警告说签名支付（chip-and-sign ）的信用卡系统存在弱点
2015-10-10 11:33:38 4049 次阅读 1 次推荐 稿源：cnBeta.COM 17 条评论
the United States 美国
Target信用卡泄露事件让美国人对信用卡安全的担忧上升到了极致，民众开始真正认识到卡信息的安全问题，很多人开始使用EMV芯片卡。不过美国联邦调查局（FBI）网络欺诈投诉中心的官员在今天的声明中表示，EMV芯片信用卡中新的签名支付（chip-and-sign ）方式存在安全隐患，容易遭到黑客攻击。 警告强调说签名支付(chip and sign）的信用卡存在弱点，并指示商家要求客户尽可能用PIN密码代替签名支付。他们指出需要充分利用EMV芯片卡中内置的安全功能。
http://www.theverge.com/2015/10/ ... ty-chip-credit-cardThe FBI has a stern warning for the credit card industry's latest security measure, the EMV chip.
In a statement today, the FBI's Internet Crime Complaint Center warned that the new chips don't prevent against online fraud or point-of-sale compromises of the
type seen in the Target hack. The warning emphasizes the weakness of signature-based systems ("chip and sign" rather than "chip and PIN"), and instructs merchants to require a PIN number in place of a signature wherever possible. "This fully utilizes the security features built within the EMV card," the warning states.
The underlying weaknesses in the warning were already known to much of the industry, but it emphasizes the frustration many feel with the current deployment. "The FBI’s alert should be a wake-up call to the banks and card networks that continue to stand in the way of making PIN authentication the standard in the US just as it has been around the world for years," said Brian Dodge, executive vice president of the Retail Industry Leaders Association, in a provided statement.
Even with the new system, the US is still woefully behind the curve in payment technology, as most major markets have finished the transition to chip-and-PIN systems a decade ago. The current system is more relaxed, allowing for signatures in place of PIN numbers, but a recent study found less than two-thirds of retailers have been able to implement the system before an industry-wide deadline earlier this month.
[
本帖最后由 Nothing 于 2015-10-13 17:18 编辑]
