Coin Teams With MasterCard In Wearable Payments Push (thestack.com) 63
An anonymous reader writes: Smart payments startup Coin has announced it will team up with MasterCard to use its electronic card technology to help companies integrate payment services into their wearable devices. Under the new MasterCard partnership, owners of wearables with integrated Coin technology will be able to pay at retail outlets without the need to take out any cash or card . The deal is not exclusive, which means that there is still potential for Visa and American Express customers to benefit when the Coin-embedded tech begins to ship later this year.
I can see it already (Score:2)
Re: (Score:3)
And people will come up with a way to read it as the walk by you. They'll pick your pockets even when you don't have a pocket.
Re: (Score:2)
I think that was already implemented long before this new technology: it's called "taxes."
Re: (Score:2)
Sadly, that's true.
Re: (Score:2)
The 2014 Federal budget was $3.506 trillion.
If you think all of that was necessary and proper, seek psychiatric help.
Re: (Score:3)
I'll just stick to cash. Especially for my private individual gun purchases.
Chip cards (Score:3, Insightful)
Re: (Score:3)
I agree, A device where you can download and install arbitrary software from the internet is not a place where I want the authentication method for monetary transactions to be kept. Yes I know buying things online counts, but there is a solution for that too.
Re: (Score:2)
Yes I know buying things online counts, but there is a solution for that too.
Namely?
Re: (Score:2)
Have a external non-programmable card plugged in do a challenge response authentication. Make there be a physical action that must be performed on that card, eg enter pin, press a button.
Your details cannot be stolen since you never give them out. Your computer cannot just authenticate transactions on bulk because you need to press that button each time. This could also be a good way of logging into places.
Authenticator is something else to carry (Score:2)
Have a external non-programmable card plugged in do a challenge response authentication.
I'm not so sure to what extent cardmembers would be willing to carry around an EMV card reader in case they want to buy something online with a laptop, tablet, or smartphone.
Re: (Score:2)
The reader doesn't need to be safe just the card, that stores your private key, it would not need to be bigger than a credit card or a usb key. Your chip and pin card should already do a challenge response.
This http://www.slipperybrick.com/2... [slipperybrick.com] has data entry any processing (power could be supplied by the reader) that is 7 years ago.
If readers became standard which they would if everybody paid this way then their would be no issue, the reader could even be wireless. I would be happy with that as long as a p
Re: (Score:2)
If readers became standard which they would if everybody paid this way then their would be no issue, the reader could even be wireless.
But it'd still be something to have forgotten at home or to have misplaced.
Re: (Score:2)
The reader would be in every shop, every cell phone, every computer, the reader could simply be a NFC reader which is in pretty much every smart phone now, the point is the reader does not have to be secure. All it does is, asks the bank I would like to authorize this transaction, the bank says here encrypt random number X appended with the pin with the cards private key. If you made the card itself enter the pin the reader could not even capture the pin (minor point as mentioned before). The user holds dow
Re: (Score:2)
If you mean you could leave your card a home, or lose it
I meant leaving the reader at home. Readers are in every shop but not already in every cell phone or every computer.
Re: (Score:2)
Not now but could easily be, if this was to become a standard method of payment that banks supported. You could make a usb dongle for old computers. To admit I do not have NFC in my cell phone, it is a feature phone. I don't know which phones do, certainly people in my office do but I do work in the IT industry and that may not be a fair sample. Then again I do not use my phone to make purchases either. people do seem to replace their phone often, every couple of years, not me of course, my phone is 10 year
Re: (Score:2)
Actually thinking about it, it probably would not need to be any bigger than a sim card, you could have it in a shielded slot on your phone, it physically connects it to your phone ready to authenticate 1 transaction.
Re: (Score:2)
Re: (Score:2)
I understand that, your phone is not a secure anything, but it would require the criminal to actually track you down and steal from you, they could do that without even entering any details. Just like when you type your pin in any EFTPOS machine there can be cameras watching, (if the machine is not itself compromised) or next person can use an infra red camera to get your pin. This of course rely on actual physical access to your card. If your phone is on you and compromised it can broadcast a signal so the
Re: (Score:2)
Cash and buying in person will always be better. Why, because you choose, cash in pocket and you choose whether to spend it or not. Electronic payments breaks down to this, "Please sir, may I have this", this is the begging plea, each and every time you ask permission to have something. Every time I make a credit card purchase in store I always laugh with the comment, "my card still loves me". I limit my credit card purchases because it inherently irritates to plead for permission to have something and sta
Re: (Score:2)
No it is not, maybe you every time you buy on a credit card you worry about it being declined, but I don't, I do not purchase anything on a card that cannot afford to buy with cash.
You could make the same argument with cash, each time you pay for a particular good you, they could say no. I don't beg for anything if the shop doesn't give me the goods, or even slightly annoys me I say stuff off and go somewhere else. If you are talking about the bank kindly letting me take money out of my account, then unless
Re: (Score:2)
Idjiot, generally people who prefer cash, prefer cash because that's what that have plenty of and dislike credit because they don't need it. Delude yourself all you want but make no mistake it's "Please sir may I have another" and should they develop a dislike to you for what ever political reason, not only does it become a no but they will track you down, beat you up and throw you in a cage. A freeman uses cash, a slave presents a permission slip provided by their master.
Re: (Score:2)
they will track you down, beat you up and throw you in a cage
Congratulations on your follow up post being even more deranged than your first.
Re: (Score:2)
First electronic payments, and credit are 2 separate things you should be able to use one without the other. You said in your post
Nothing at all to do with privacy
So tracking you down really is not relevant, but with facial recognition getting better all they need is a store camera to track you down, irrelevant on if you pay by cash or electronic methods.
Re: (Score:2)
Cash and buying in person will always be better. Why, because you choose, cash in pocket and you choose whether to spend it or not. Electronic payments breaks down to this, "Please sir, may I have this", this is the begging plea, each and every time you ask permission to have something. Every time I make a credit card purchase in store I always laugh with the comment, "my card still loves me". I limit my credit card purchases because it inherently irritates to plead for permission to have something and stand pathetically waiting for approval from my credit card master.
Nothing at all to do with privacy and everything to do with who is the master and who is the slave, I refuse to spend my fucking life asking for permission to do stuff every single fucking day of it and waiting pathetically for approval.
No offence, but you're as mad as a sack full of weasels.
Re: (Score:2)
Let me guess, you work for a company that demands a corporate tax upon every transaction on the planet, a tax you don't pay if you pay with cash, basically billions lost to those corporations when people pay with cash instead, well billions lost to those corporations and billions saved by every one else. Credit cards companies are basically financial parasites and regardless of ad hominem attacks, I'll stick with cash for the bulk of my purchases.
Re: (Score:3)
The last two replies got it wrong (IMO), so here goes on my attempt...
MFA (Multi Factor Auth). Sorry, I couldn't find an easy doc or example within my first few searches, so you'll have to trust me a bit.
When you check out from some sites, such as newegg, if your bank supports the extra secure pay thingy (I can't remember its exact name), then newegg redirects you to your banks site. If you have it enabled, then you must enter some info for your bank so it can authenticate that you are the owner of the car
Re: (Score:2)
Regardless, there are solutions for that, but the physical world solution should not (IMO, and the opinion of the GP) be on some relatively insecure device where arbitrary software can be installed from the internet.
And yet, time after time, millions of people's card credentials have been stolen from supposedly certified, secure, PCI-DSS compliant Point of Sale equipment on which arbitary software was installed from the internet. Whereas payments through phone-NFC-PoS-Bank transactions have not suffered the same fate.
Maybe because people involved in the creation of the through phone-NFC-PoS-Bank transaction mechanisms knew what the hell they were doing, whereas the PCI-DSS people do not.
Re: (Score:2)
Great example; batshit insane conclusion.
It also has nothing to do with this branch of the thread. Read what I was replying to.
I would agree that the original designs for the secure payment systems for smart phones were great, even if they were on devices like that. However, corners are being cut now. For example, from what I can tell, Android Pay no longer requires the use of a separate chip to securely store the sensitive data (the secure element).
Re: (Score:2)
Great example; batshit insane conclusion.
It also has nothing to do with this branch of the thread. Read what I was replying to.
I would agree that the original designs for the secure payment systems for smart phones were great, even if they were on devices like that. However, corners are being cut now. For example, from what I can tell, Android Pay no longer requires the use of a separate chip to securely store the sensitive data (the secure element).
There are reasons for that. The secure storage is still a requirement. However chip vendors have begun incorporating the secure storage on the main die. From an attack surface point of view, this is better. The physical 'separateness' of the storage element is not a security goal or feature. The logical separateness certainly is.
Re: (Score:1)
And given the sorry state of Smart Phone security why do people insist on using their phones for anything? You are just asking for trouble.
FTFY.
Re: (Score:1)
Sales.
It's been demonstrated that people are likely to spend more when there's less friction.
Ridiculous friction: Barter of physical commodities. I bring my cow to the market, I go ho
Re: (Score:2)
Re: (Score:2)
Lower friction: Contactless card. Bump your ass into a wall-mounted terminal, place your purse on the checkout counter while your groceries are being bagged, fist-bump the cute little robot terminal while wearing a smartwatch, all sorts of ways to make the ritual "fun" and engaging. 2 seconds. ...
Except that's a fantasy and does not reflect reality at all.
You have to accept the charge via your phone. That's the only thing that keeps people from walking buy and taking all your money without ever touching you.
That alone doesn't sound hard, but that means you have to take out your phone (could have taken out your wallet).
Then you have to unlock it (or open your wallet).
Then put the phone where the reader can read it and wait for those things to talk to each other (or swipe your card, which is, IMO, fas
Re: (Score:1)
You have to accept the charge via your phone. That's the only thing that keeps people from walking buy and taking all your money without ever touching you.
That alone doesn't sound hard, but that means you have to take out your phone (could have taken out your wallet).
Then you have to unlock it (or open your wallet).
Then put the phone where the reader can read it and wait for those things to talk to each other (or swipe your card, which is, IMO, faster).
Then accept the charge (or sign the terminal or receipt, or not if it's a small purchase).
Then lock and return your phone (or put card back and put wallet in your pocket).
That's true of many of the shittier ways to pay, if you have an Apple Watch (or I'm guessing an Android one), it looks like this:
Double tap button on side of watch, bump it against payment terminal.
Done.
Re: (Score:2)
And given the sorry state of Smart Phone security why do people insist on using their phones for payment?
Because my phone hasn't been stolen and used to buy gas in Tijuana or clothes in Florida 4 times in the last 4 years. I trust Apple Pay because I've actually read their published whitepapers and like its design. I love the idea that I'm not giving Joe's Meth Shack my actual credit card number when I stop for food on a roadtrip.
Given a choice between handing out sensitive data to anyone who asks for it, versus a one-time-use number that's still fully backed by fraud liability limits if something goes wrong,
Re: (Score:2)
Magnetic stripe cards provide no security themselves. They are good enough for now, but card makers and some customers want something with a bit more security. Chip cards provide reasonably good encryption, and are much harder to clone.
Phones, on the other hand, are used for payment a lot right now. They are used when you pay for Uber, or when you buy apps, or when I pay my rent with a bank transfer using my phone's web browser + a coordinate card. Plus, it's usually with you, so it's convenient, that is al
Re: (Score:2)
Jesus christ we've had that for decades.
Well this is embarrassing ... (Score:1)
Maybe If It Was Attached To Your Hand (Score:1)
Re: (Score:1)
It's the mark of the beast!
Here is a better idea... (Score:2)
Re: (Score:2)
Exactly why I cancelled my preorder - when they delayed it to be a month before all the retailers were supposed to have EMV readers installed at the point of sale, and Coin didn't yet support EMV, it showed that they weren't keeping up. Then, when they reduced the number of available units in their 'beta' due to manufacturing issues, it reinforced it.
I wasn't going to pay that kind of money to get something already obsolete, months late. Nice try, but learn to execute.
Is this a Joke? (Score:2)
But that is also the case with these "Coin" devices too. FTFA
Re: (Score:1)
Re: (Score:2)
By integrating Coin's "technology" you can make your "wearable" as useful for contactless payment as your two year old smartphone with NFC. As in, your device can have multiple payment card infos on it, you pick one, and then do a Jedi wave. Just like you can with basically an Android or iPhone since 2014.
Yay?
Re: (Score:2)
Re: (Score:2)
Actually, the one I enjoy is the self-serve lines at the grocery store. It's a great place to get rid of all the coins--they even accept pennies--that you accumulate when you pay $7.38 for something.
Solution in search of a problem (Score:2)
I hope they all die in a fire (Score:3)
They deserve to fail and die for not only choosing a common word for their name, but also choosing a name that's in common use in something closely related.
Re: (Score:2)
They deserve to fail and die for not only choosing a common word for their name, but also choosing a name that's in common use in something closely related.
Like Microsoft's "Windows" and "Word" you mean ?
Re: (Score:2)
Especially since the use of said device makes it so that a coin is never involved.