Stories
Slash Boxes
Comments

SoylentNews is people

posted by mrpg on Tuesday May 14 2019, @10:00AM   Printer-friendly
from the ohoh dept.

Europe is bracing itself for a big shake-up in how we pay for things online, which will have significant consequences for businesses across the region. Similar to how GDPR hugely impacted how millions of organizations handle personal data when it was enforced last year, Strong Customer Authentication (or SCA) will have profound implications for how businesses handle online transactions and how we pay for things in our everyday lives when it is enforced on September 14.

SCA will require an extra layer of authentication for online payments. Where a card number and address once sufficed, customers will now be required to include at least two of the following three factors to do anything as simple as order a taxi or pay for a music streaming service. Something they know (like a password or PIN), something they own (like a token or smartphone), and something they are (like a fingerprint or biometric facial features).

https://thenextweb.com/podium/2019/05/10/your-business-passed-the-gdpr-challenge-but-sca-is-next/


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2, Informative) by Anonymous Coward on Tuesday May 14 2019, @10:13AM (23 children)

    by Anonymous Coward on Tuesday May 14 2019, @10:13AM (#843333)

    This has already been implemented with things like Visa-secure, where they send you an authentication PIN. Also, all banks now require use of OTP for transaction authorization. one-time-pads are not longer sufficient. I've had to use OTP for bank authorizations since at least a year.

    Yes, this might be funny for Americans that can't even do direct transfers from their bank accounts, but whatever. They live in dark ages with cheques and stuff.

    Starting Score:    0  points
    Moderation   +2  
       Informative=2, Total=2
    Extra 'Informative' Modifier   0  

    Total Score:   2  
  • (Score: 1, Informative) by Anonymous Coward on Tuesday May 14 2019, @10:17AM (20 children)

    by Anonymous Coward on Tuesday May 14 2019, @10:17AM (#843334)

    Also, cash you know, it still works. No authentication needed.

    • (Score: 2) by The Mighty Buzzard on Tuesday May 14 2019, @10:41AM (8 children)

      Yup. That's what I use exclusively unless I have to buy something online. For that I use prepaid cards from Wal-Mart.

      --
      My rights don't end where your fear begins.
      • (Score: 1) by Chocolate on Tuesday May 14 2019, @11:06AM (7 children)

        by Chocolate (8044) on Tuesday May 14 2019, @11:06AM (#843345) Journal

        I had been using those cards for ages but now they are clamping down on them cause some people are using them to funnel funds overseas which the local authies don't like
        Bastards.
        For while now this has really been good, well, I suppose not the cost of buying a temp card but then it works out cheaper than the cost of an actual card so long as only a few are used but now it is a right pain in the rear and the temp card is so much better than a real card with no info behind it and if it is jacked they don't get much.
        One of my cards was jacked by some middle man place that processes porn services that whacked on $40 charges taking up $80 but that's all and it was eventually refunded, new card!, but I still don't like using an actual credit card online

        --
        Bit-choco-coin anyone?
        • (Score: 2) by The Mighty Buzzard on Tuesday May 14 2019, @11:18AM (6 children)

          Only put what you need on it for the purchase you're making then throw it away. Buy another card for the next purchase.

          --
          My rights don't end where your fear begins.
          • (Score: 0) by Anonymous Coward on Tuesday May 14 2019, @11:53AM (2 children)

            by Anonymous Coward on Tuesday May 14 2019, @11:53AM (#843363)

            Wondering if EU retailers will come up with something like this to skirt SCA requirements.

            And I'm impressed at the quote from the devils dictionary in your .sig

            • (Score: 2) by quietus on Tuesday May 14 2019, @05:07PM

              by quietus (6328) on Tuesday May 14 2019, @05:07PM (#843483) Journal

              There's a trend to accept a customer's order without him/having to pay directly. All of my online business purchases -- except for those from the single US website -- go like this: order, than pay after reception through ATM (I'm not into online banking, though that's a hard push these days too).

              Making an online purchase with credit card has required an OTP [bank provided device] for years now.

            • (Score: 2) by The Mighty Buzzard on Wednesday May 15 2019, @10:10AM

              Cheers. I'm a big fan in general. I'd have preferred his definition of responsibility but it's too long for a sig.

              --
              My rights don't end where your fear begins.
          • (Score: 1) by Chocolate on Tuesday May 14 2019, @12:17PM (2 children)

            by Chocolate (8044) on Tuesday May 14 2019, @12:17PM (#843372) Journal

            I be liking the cut of ya jib there matey
            I do recall seeing the cards when first they came out being a way to give money to others for gifts la la la but for ages never thought to use them for online stuff so now after they clamp down I needed to do better so instead of buying those gift ones I go for the travel cards at the bank which needs a bank account and doesn't work always for some sites and stuff but hey it's good enough. Expires every year but some banks have them for free so long as you have any account I think they try to get extra data which fails transactions but they never tell you why it fails it just errors out whereas those gift cards always work and there's no personal data behind them. Stripe dudes are awesome but paypal sucks

            --
            Bit-choco-coin anyone?
            • (Score: 5, Interesting) by Immerman on Tuesday May 14 2019, @01:58PM (1 child)

              by Immerman (3985) on Tuesday May 14 2019, @01:58PM (#843408)

              Honestly, I never understood the point of "gift cards" - they're no more personal than cash, just a bit less convenient to use, and almost certain to be used for things the recipient values less than what they could have bought with the more widely usable cash (even non-business-specific "cash cards" are less widely accepted than cash). Not to mention giving a middle-man a cut.

              All of which strikes me as the exact opposite of the best qualities of a good gift: personal, and well considered enough to enrich the recipient more than it impoverishes the giver.

              Then again I shouldn't be surprised, given how dedicated our culture has become to consumerism, whose guiding principle seems to be to manipulate people into buying things despite the fact that they generally cost far more than they enrich the customer's life.

              But yeah, it does seem they would at least be convenient for online purchases that you don't want added to a bank's customer information database.

              • (Score: 1) by Chocolate on Friday May 17 2019, @05:32AM

                by Chocolate (8044) on Friday May 17 2019, @05:32AM (#844617) Journal

                Maybe bank notes could come with unique identification like credit cards that could be used like a credit card number is today.
                The only problem is how to get your change.
                Although, if the user enters the bank note ID into the merchant system, the merchant system creates a receipt with a key, the user goes to a bank to hand in the note along with the key, the bank matches the note to the transaction ID, gives the person change, takes a cut, credits the merchant and everyone is happy.

                --
                Bit-choco-coin anyone?
    • (Score: 0) by Anonymous Coward on Tuesday May 14 2019, @11:09AM (3 children)

      by Anonymous Coward on Tuesday May 14 2019, @11:09AM (#843346)

      ummm jus so we okay here how does you spend cash online?

      • (Score: 2) by The Mighty Buzzard on Tuesday May 14 2019, @11:19AM (1 child)

        You go to Wal-Mart, pay cash for a prepaid card in the exact amount you need, use it, and throw it away.

        --
        My rights don't end where your fear begins.
        • (Score: 1) by Chocolate on Tuesday May 14 2019, @12:21PM

          by Chocolate (8044) on Tuesday May 14 2019, @12:21PM (#843375) Journal

          'Merica, land of the free, home of the anonymous phone, anonymous card, we should be so lucky to have as such
          Can see why people go there :)

          --
          Bit-choco-coin anyone?
      • (Score: 3, Funny) by MostCynical on Tuesday May 14 2019, @11:22AM

        by MostCynical (2589) on Tuesday May 14 2019, @11:22AM (#843352) Journal

        he puts it into a slot between the monitor and keyboard.

        nothing ordered ever arrives...

        --
        "I guess once you start doubting, there's no end to it." -Batou, Ghost in the Shell: Stand Alone Complex
    • (Score: 0) by Anonymous Coward on Tuesday May 14 2019, @02:46PM

      by Anonymous Coward on Tuesday May 14 2019, @02:46PM (#843425)

      Cash in many places is in itself considered to be authentication

    • (Score: 2) by ledow on Tuesday May 14 2019, @02:59PM (5 children)

      by ledow (5567) on Tuesday May 14 2019, @02:59PM (#843428) Homepage

      Good luck paying your gas bill in cash.
      Or electric.
      Council tax, etc. you might be able to, but you'll have to go there each month to do so or pay in a lump sum.
      Fuel for your car, sure.
      Car insurance? That sounds tricky.
      Weekly shopping, okay.
      Your internet connection, probably not.
      Your mobile phone, maybe, but only if you want to manually top it up each time and hand over your phone number to do so (which kind of defeats the point?)
      Any online service whatsoever? Nope.
      Paying for a holiday, possibly.

      In case you haven't noticed, cash is a pain to use nowadays. And I see no reason why you'd want a method without authentication. When your cash is nicked, you mis-count, or someone finds it, you have absolutely no control over what it's used for. You are effectively "running as root" all the time. One slip and you lose everything and it's almost impossible to get it back.

      It's 2019. I work a full working week. Life's too short to piss about handling cash, which is recordless. When I don't get the goods/services I request, I have a record of everything, can back my money out of the transaction, file disputes, etc. With cash, you're just stuffed. And you'll almost NEVER get refunded in cash. If you're concerned about mistakes, then hedge your bets over several providers and never lump all your money in one. And that one certainly shouldn't be cash.

      Unless you live literally hand-to-mouth, cash-only, in a cash-business, and have relatively low demands on your money while having all the time in the world to mess about, and a desire to cover your tracks in a way that puts up every red flag I can think of, not to mention tax evasion (either you're declaring the amount you earned and paying tax on it, or you're not - either way, you're creating a record of your activity that will arouse suspicion and which you're required to back up with receipts and evidence, or your breaking the law) then it's time to get into the 21st Century.

      • (Score: -1, Flamebait) by Anonymous Coward on Tuesday May 14 2019, @04:42PM (1 child)

        by Anonymous Coward on Tuesday May 14 2019, @04:42PM (#843471)

        You completely misunderstand the issue.

        It's not that cash is inherently better than any other medium of exchange (well, aside from barter), it's that the evil socialists of the deep state are going to great lengths to identify and locate every single white male.

        Because they hate America and want to destroy it. They will do this by pinpointing the location of each white male (via their credit card purchases and cell phones), kneecapping [wikipedia.org] each one and then forcing them to watch the invading Muslim hordes (hidden under the skirts of every Guatemalan woman trying to get "asylum" in the US), rape their wives, daughters and sisters. But that's not even the worst part, as those big, beautiful darkie cocks will make every woman understand what they've been missing all these years.

        The deep state (despite, as those who've defined it don't make clear, contains mostly white men) hates white men and is doing everything it can to harm the US, its economy (despite the fact that they live there) and destroy the paradise of freedom that has existed in the US since 1565.

        We must only use cash and never take the same route home twice, or the next thing you know (this is scheduled for the week after next), every white man will have holes in their knees and images of their women sucking big, beautiful, hard, glistening, throbbing darkie cock burned into their brains for the rest of their short-ass lives.

        That's why people use cash. If you don't use cash, you hate America and are a pig racist who hates white men! But don't worry, the big, hard darkie Muslim cocks are coming for you too!

         

        • (Score: 0) by Anonymous Coward on Friday May 17 2019, @05:35AM

          by Anonymous Coward on Friday May 17 2019, @05:35AM (#844618)

          Good description of what happened to India. Which is why they now have a muslim problem.

      • (Score: 1, Informative) by Anonymous Coward on Tuesday May 14 2019, @09:40PM

        by Anonymous Coward on Tuesday May 14 2019, @09:40PM (#843605)

        " And I see no reason why you'd want a method without authentication."

        that's b/c you're not free. You're a slave.

      • (Score: 0) by Anonymous Coward on Wednesday May 15 2019, @04:55AM

        by Anonymous Coward on Wednesday May 15 2019, @04:55AM (#843696)

        You act as if there's something wrong with not wanting to be tracked 24/7 by governments and mega-corporations. No, privacy is more important than ever in the age of mass surveillance, not less. You have chosen to surrender completely to the surveillance state, which makes you part of the problem.

      • (Score: 3, Informative) by The Mighty Buzzard on Wednesday May 15 2019, @10:22AM

        I pay all of my bills in cash and in person every month, thanks. Twice a month I spend an hour in the morning driving around town and exchanging cash for receipts. It's even enjoyable if it's not raining for the getting out of the house aspect and the socializing so that you're not a faceless ledger entry aspect.

        --
        My rights don't end where your fear begins.
  • (Score: 3, Interesting) by bradley13 on Tuesday May 14 2019, @11:19AM

    by bradley13 (3053) on Tuesday May 14 2019, @11:19AM (#843350) Homepage Journal

    Transaction security is a good thing. If you want anonymity, that's a different issue. However, non-anonymous online transactions need reasonable security. The good old days of the number on a credit card being sufficient? That just cannot work, because those numbers are too easily compromised.

    If you want anonymous transactions online, you will have to find a seller who accepts Monero, or some other cryptocurrency that supports anonymity. For normal transactions.

    --
    Everyone is somebody else's weirdo.
  • (Score: 2) by hendrikboom on Friday May 24 2019, @10:46AM

    by hendrikboom (1125) Subscriber Badge on Friday May 24 2019, @10:46AM (#847007) Homepage Journal

    What's OTP? I gather that isn't "One-time Pad" because you say one-time pads are no longer sufficient.