Comments on: 389 …doh http://blog.artesea.co.uk/2004/12/389-doh.html A blog by Ryan Cullen Wed, 28 Jul 2010 20:18:15 +0000 hourly 1 http://wordpress.org/?v=3.0 By: Hugo http://blog.artesea.co.uk/2004/12/389-doh.html#comment-326 Hugo Sat, 04 Feb 2006 17:08:37 +0000 http://www.artesea.co.uk/wordpress/2004/12/389-doh.html#comment-326 Chip and PIN's own website has a PDF guide on remembering PINs, and says: "* To remember a new PIN, you could use an anniversary or friend's birthday. Use a combination of day and month, or month and year, whichever is easiest to remember - but don't use numbers that are easily associated with you, like your own date of birth". So: your birthday -- bad. Someone else's -- good. This is a good tip: "Rather than learn a PIN digit by digit, learn the pattern that you need to trace on the keypad with your fingers" One of the worst thing about Chip and PINs is that the machines are so rubbish. Many times I've seen people type PINs into a machine held over a pub bar by the barstaff. I think I should just go up to the and tell them their number out loud. Chip and PIN’s own website has a PDF guide on remembering PINs, and says:

“* To remember a new PIN, you could use an anniversary or friend’s birthday. Use a combination of day and month, or month and year, whichever is easiest to remember – but don’t use numbers that are easily associated with you, like your own date of birth”.

So: your birthday — bad. Someone else’s — good.

This is a good tip:
“Rather than learn a PIN digit by digit, learn the pattern that you need to trace on the keypad with your fingers”

One of the worst thing about Chip and PINs is that the machines are so rubbish. Many times I’ve seen people type PINs into a machine held over a pub bar by the barstaff. I think I should just go up to the and tell them their number out loud.

]]> By: Nick http://blog.artesea.co.uk/2004/12/389-doh.html#comment-325 Nick Sat, 03 Sep 2005 03:14:43 +0000 http://www.artesea.co.uk/wordpress/2004/12/389-doh.html#comment-325 hard to remember all your pin numbers ??? I had the same trouble until ; <a href="http://www.pinpal.com.au"><b>www.pinpal.com.au</b></a> hard to remember all your pin numbers ???

I had the same trouble until ;

http://www.pinpal.com.au

]]> By: Neal http://blog.artesea.co.uk/2004/12/389-doh.html#comment-322 Neal Wed, 17 Aug 2005 16:04:30 +0000 http://www.artesea.co.uk/wordpress/2004/12/389-doh.html#comment-322 Yeah it does say "a birthday" not "your" birthday. It could be the birthday of a famous person, family member or friend. You can't change your PIN by phone either, only at a cash machine by selecting the PIN Services option. It tells you to contact your card issuer so that they can provide the details on how you can change your PIN. ;) Yeah it does say “a birthday” not “your” birthday. It could be the birthday of a famous person, family member or friend. You can’t change your PIN by phone either, only at a cash machine by selecting the PIN Services option. It tells you to contact your card issuer so that they can provide the details on how you can change your PIN. ;)

]]> By: Matt_FSR http://blog.artesea.co.uk/2004/12/389-doh.html#comment-320 Matt_FSR Fri, 11 Feb 2005 08:32:34 +0000 http://www.artesea.co.uk/wordpress/2004/12/389-doh.html#comment-320 Missing the point slightly about driving licences - your date of birth is easily available knowledge, and could be obtained by a wide variety of social engineering hacks - how many agencies record your DOB? Does your credit/store card have that information? Thats in your wallet..... American or otherwise! Missing the point slightly about driving licences – your date of birth is easily available knowledge, and could be obtained by a wide variety of social engineering hacks – how many agencies record your DOB? Does your credit/store card have that information? Thats in your wallet….. American or otherwise!

]]> By: Biscit http://blog.artesea.co.uk/2004/12/389-doh.html#comment-319 Biscit Mon, 24 Jan 2005 10:31:38 +0000 http://www.artesea.co.uk/wordpress/2004/12/389-doh.html#comment-319 It says "a" birthday anyway not your birthday. And I don't carry a drivers licence because I'm not from the US so therfore don't have a driv<i>ers</i> licence It says “a” birthday anyway not your birthday.

And I don’t carry a drivers licence because I’m not from the US
so therfore don’t have a drivers licence

]]> By: Anon-US http://blog.artesea.co.uk/2004/12/389-doh.html#comment-323 Anon-US Wed, 19 Jan 2005 16:55:43 +0000 http://www.artesea.co.uk/wordpress/2004/12/389-doh.html#comment-323 The matter of whether you have the license or not is irrelevant. The issue is "make it easy" marketers determining a security procedure. Not their job, but I'm sure the top bosses are imagining the piles of euros they'll reap from being user-friendly. As Schneier says, "Who makes the decision, and what is their agenda?" The matter of whether you have the license or not is irrelevant. The issue is “make it easy” marketers determining a security procedure. Not their job, but I’m sure the top bosses are imagining the piles of euros they’ll reap from being user-friendly.

As Schneier says, “Who makes the decision, and what is their agenda?”

]]> By: Anonymous http://blog.artesea.co.uk/2004/12/389-doh.html#comment-318 Anonymous Mon, 17 Jan 2005 11:43:55 +0000 http://www.artesea.co.uk/wordpress/2004/12/389-doh.html#comment-318 In the UK there is no requirement to produce your driving license on demand to the police, but rather you can request to produce it at a nominated police station within 5 days. In fact, when stopped in your car, even if you have ID on you, you are better off taking the police station option. In the UK there is no requirement to produce your driving license on demand to the police, but rather you can request to produce it at a nominated police station within 5 days. In fact, when stopped in your car, even if you have ID on you, you are better off taking the police station option.

]]> By: Anonymous http://blog.artesea.co.uk/2004/12/389-doh.html#comment-321 Anonymous Mon, 17 Jan 2005 06:34:58 +0000 http://www.artesea.co.uk/wordpress/2004/12/389-doh.html#comment-321 Not just Americans keep their drivers license with them in this world. It's a conveinent place to keep it and provide when requested by law enforcement. You may keep it in your car but what happens if you drive more than one car ? I believe that marketing people have become involved here without consultation of security professionals. PINs have very strict requirements surrounding their entry into approved devices and marketing don't realise this. Not just Americans keep their drivers license with them in this world. It’s a conveinent place to keep it and provide when requested by law enforcement. You may keep it in your car but what happens if you drive more than one car ?

I believe that marketing people have become involved here without consultation of security professionals. PINs have very strict requirements surrounding their entry into approved devices and marketing don’t realise this.

]]> By: Anonymous http://blog.artesea.co.uk/2004/12/389-doh.html#comment-324 Anonymous Sun, 16 Jan 2005 19:46:29 +0000 http://www.artesea.co.uk/wordpress/2004/12/389-doh.html#comment-324 Why do you keep your drivers license with you? Are you American or something? Why do you keep your drivers license with you? Are you American or something?

]]>