Re: Changing PINs of German bank card

2017-07-18 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Saturday 15 July 2017 at 3:54:07 PM, in , Brad Rogers wrote:- > Card no. CVV & expiry date. Sorry, tired when I wrote that. On the shopping website, the customer keys in the long card

Re: Changing PINs of German bank card

2017-07-15 Thread Binarus
On 15.07.2017 11:17, Andy Ruddock wrote: > Just as a point of interest > >> I am not sure if this is an intentional limitation of the cards (to >> prevent users from choosing idiotic pins like 1234 or their birthday). > > I know of somebody who had 1234 issued as their PIN for a UK bank >

Re: Changing PINs of German bank card

2017-07-15 Thread Binarus
On 15.07.2017 16:40, MFPA wrote: > > > On Thursday 13 July 2017 at 7:18:41 AM, in > , Binarus wrote:- > > >> I don't think so. Banking chip cards contain >> mechanisms for local PIN >> verification. You can see that an ATM (or the card) >>

Re: Changing PINs of German bank card

2017-07-15 Thread Binarus
On 15.07.2017 12:36, MFPA wrote: > > > On Wednesday 12 July 2017 at 11:01:35 AM, in > , Binarus wrote:- > > >> As far as I know, no bank will be able to tell you >> your PIN if you have >> forgotten it > > They can in the UK. For example,

Re: Changing PINs of German bank card

2017-07-15 Thread Andrew Gallagher
> On 15 Jul 2017, at 15:40, MFPA <2014-667rhzu3dc-lists-gro...@riseup.net> > wrote: > > On the shopping > website, the customer keys in the long card number, the PIN, and the > last three digits from the signature strip. The chip on the card is > not involved. No, the chip on the card is not

Re: Changing PINs of German bank card

2017-07-15 Thread Brad Rogers
On Sat, 15 Jul 2017 15:40:25 +0100 MFPA <2014-667rhzu3dc-lists-gro...@riseup.net> wrote: Hello MFPA, >All of which is irrelevant for online transactions. On the shopping >website, the customer keys in the long card number, the PIN, and the Entered a card *PIN* into a shopping web site?

Re: Changing PINs of German bank card

2017-07-15 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Thursday 13 July 2017 at 7:18:41 AM, in , Binarus wrote:- > I don't think so. Banking chip cards contain > mechanisms for local PIN > verification. You can see that an ATM (or the card) >

Re: Changing PINs of German bank card

2017-07-15 Thread Matthias Apitz
On Saturday, 15 July 2017 11:17:18 CEST, Andy Ruddock wrote: Just as a point of interest I am not sure if this is an intentional limitation of the cards (to prevent users from choosing idiotic pins like 1234 or their birthday). I know of somebody who had 1234

Re: Changing PINs of German bank card

2017-07-15 Thread Andy Ruddock
Just as a point of interest > I am not sure if this is an intentional limitation of the cards (to > prevent users from choosing idiotic pins like 1234 or their birthday). I know of somebody who had 1234 issued as their PIN for a UK bank account (it IS as random a selection as any other 4-digit

Re: Changing PINs of German bank card

2017-07-15 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wednesday 12 July 2017 at 11:10:12 AM, in , Peter Lebbing wrote:- > Also, back when you could do payments with the > magstripe (which, AFAIK, > can still be done in some countries,

Re: Changing PINs of German bank card

2017-07-15 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wednesday 12 July 2017 at 11:01:35 AM, in , Binarus wrote:- > As far as I know, no bank will be able to tell you > your PIN if you have > forgotten it They can in the UK. For example, see

Re: Changing PINs of German bank card

2017-07-13 Thread Binarus
On 13.07.2017 01:19, MFPA wrote: > > > On Wednesday 12 July 2017 at 6:51:42 AM, in > , Binarus wrote:- > > >> and this means that such software would >> have to run on the >> card. > > Or The ATM. You are right. The ATM will get hold of

Re: Changing PINs of German bank card

2017-07-13 Thread Binarus
On 13.07.2017 01:23, MFPA wrote: > > > On Wednesday 12 July 2017 at 3:15:09 PM, in > , Binarus wrote:- > > > >> (if the >> PIN needs to be >> stored at all in some backend which I doubt). > > The Bank must know the PIN (or a hash).

Re: Changing PINs of German bank card

2017-07-12 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wednesday 12 July 2017 at 3:15:09 PM, in , Binarus wrote:- > (if the > PIN needs to be > stored at all in some backend which I doubt). The Bank must know the PIN (or a hash). Otherwise

Re: Changing PINs of German bank card

2017-07-12 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Wednesday 12 July 2017 at 6:51:42 AM, in , Binarus wrote:- >and this means that such software would > have to run on the > card. Or The ATM. But maybe chip and PIN cards have the

Re: Changing PINs of German bank card

2017-07-12 Thread Binarus
On 12.07.2017 12:10, Peter Lebbing wrote: > On 12/07/17 07:51, Binarus wrote: >> Furthermore (not being sure, so read with care), I think that the bank >> does not know your pin > > When my bank card is replaced because its validity is about to end, the > new card has the same PIN as the old one.

Re: Changing PINs of German bank card

2017-07-12 Thread Binarus
On 12.07.2017 12:27, NdK wrote: > Il 12/07/2017 12:01, Binarus ha scritto: > >> Not sure about that. Similar to serious websites which don't store your >> password in clear text, but do store the password's hash instead, I >> would expect that banks don't store your PIN in clear text as well. >

Re: Changing PINs of German bank card

2017-07-12 Thread NdK
Il 12/07/2017 12:01, Binarus ha scritto: > Not sure about that. Similar to serious websites which don't store your > password in clear text, but do store the password's hash instead, I > would expect that banks don't store your PIN in clear text as well. Even with 6-digits PIN it would take

Re: Changing PINs of German bank card

2017-07-12 Thread Peter Lebbing
On 12/07/17 07:51, Binarus wrote: > Furthermore (not being sure, so read with care), I think that the bank > does not know your pin When my bank card is replaced because its validity is about to end, the new card has the same PIN as the old one. I can't readily think of a way to do that without

Re: Changing PINs of German bank card

2017-07-12 Thread Binarus
On 12.07.2017 11:42, Guan Xin wrote: > On Wed, Jul 12, 2017 at 1:51 PM, Binarus > wrote: > > On 11.07.2017 20:38, MFPA wrote: > > > > > > On Tuesday 11 July 2017 at 8:44:48 AM, in > >

Re: Changing PINs of German bank card

2017-07-12 Thread Guan Xin
On Wed, Jul 12, 2017 at 1:51 PM, Binarus wrote: > On 11.07.2017 20:38, MFPA wrote: > > > > > > On Tuesday 11 July 2017 at 8:44:48 AM, in > > , Binarus wrote:- > > > > > >> I am not sure if this is an intentional limitation of

Re: Changing PINs of German bank card

2017-07-12 Thread Julian H. Stacey
> A little bit of statistics (your name sounds German): > http://www.sueddeutsche.de/wissen/unsichere-pin-codes-erwischt-1.1486312 I read the German, here's English): http://www.berklix.org/trans/ ->

Re: Changing PINs of German bank card

2017-07-12 Thread Binarus
On 11.07.2017 21:09, Matthias Apitz wrote: > Why 1234 is an idiotic PIN? What are idiotic PINs? Of course, idiotic is > any PIN which has in your pocket hints about this (like a sticker attached > or your birthday). But remember, you normally have 3 tries only to test > all "idiotic" PINs. 1234

Re: Changing PINs of German bank card

2017-07-11 Thread Binarus
On 11.07.2017 20:38, MFPA wrote: > > > On Tuesday 11 July 2017 at 8:44:48 AM, in > , Binarus wrote:- > > >> I am not sure if this is an intentional limitation of >> the cards (to >> prevent users from choosing idiotic pins like 1234 or >>

Re: Changing PINs of German bank card

2017-07-11 Thread Matthias Apitz
El día martes, julio 11, 2017 a las 07:38:08p. m. +0100, MFPA escribió: > On Tuesday 11 July 2017 at 8:44:48 AM, in > , Binarus wrote:- > > > > I am not sure if this is an intentional limitation of > > the cards (to > > prevent users from

Re: Changing PINs of German bank card

2017-07-11 Thread Brad Rogers
On Tue, 11 Jul 2017 19:38:08 +0100 MFPA <2014-667rhzu3dc-lists-gro...@riseup.net> wrote: Hello MFPA, >Surely things like 1234 can be prevented by software. Sure. The question is "Are they?" I suspect(1) the answer, in many cases, is "No." (1) My gut feeling - I have no evidence/proof. --

Re: Changing PINs of German bank card

2017-07-11 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Tuesday 11 July 2017 at 8:44:48 AM, in , Binarus wrote:- > I am not sure if this is an intentional limitation of > the cards (to > prevent users from choosing idiotic pins like 1234 or >

Re: Changing PINs of German bank card

2017-07-11 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Tuesday 11 July 2017 at 11:23:06 AM, in , Julian H. Stacey wrote:- > All UK cards I know of allow PIN change at the ATM. Back in the 1980s I remember some that had no PIN change facility.

Re: Changing PINs of German bank card

2017-07-11 Thread Binarus
On 11.07.2017 14:38, Jerry wrote: > On Tue, 11 Jul 2017 12:32:56 +0200, Binarus stated: > > [...] >> I am not completely sure if I got you right. Wouldn't that mean that I >> have to lose my card, the bad person then makes two guesses, then I get >> back my card and enter my correct pin, then I

Re: Changing PINs of German bank card

2017-07-11 Thread Peter Lebbing
On 11/07/17 12:32, Binarus wrote: > I am not completely sure if I got you right. Wouldn't that mean that I > have to lose my card, the bad person then makes two guesses, then I get > back my card and enter my correct pin, then I lose my card again, and > the same bad person finds it again and

Re: Changing PINs of German bank card

2017-07-11 Thread Binarus
On 11.07.2017 11:48, Matthias Mansfeld wrote: > On 11 Jul 2017 at 9:44, Binarus wrote: > >> On 10.07.2017 17:42, Guan Xin wrote: >>> This is probably a general question -- >>> >>> I have never seen a German bank that allows changing the PIN of a card. >> >> I am not sure if this is an intentional

Re: Changing PINs of German bank card

2017-07-11 Thread Jerry
On Tue, 11 Jul 2017 12:32:56 +0200, Binarus stated: >On 11.07.2017 10:14, NdK wrote: >> Il 11/07/2017 09:44, Binarus ha scritto: >> >>> - If somebody tries to brute force the pin (or online banking >>> password), the access will be permanently denied if there are more >>> than 3 failures (the

Re: Changing PINs of German bank card

2017-07-11 Thread Binarus
On 11.07.2017 14:32, NdK wrote: > Il 11/07/2017 12:32, Binarus ha scritto: > >> But now, being a German citizen, try the same thing with eBay, Facebook, >> LinkedIn, PayPal and so on ... no thanks. > Why should heirs have access to social accounts? Paypal, otoh, is a bank > that have to follow

Re: Changing PINs of German bank card

2017-07-11 Thread NdK
Il 11/07/2017 12:32, Binarus ha scritto: >> If you routinely use your card twice a day, they can make two or four >> guesses each day: every correct PIN you insert resets the counter. > I am not completely sure if I got you right. Wouldn't that mean that I > have to lose my card, the bad person

Re: Changing PINs of German bank card

2017-07-11 Thread Matthias Mansfeld
On 11 Jul 2017 at 9:44, Binarus wrote: > On 10.07.2017 17:42, Guan Xin wrote: > > This is probably a general question -- > > > > I have never seen a German bank that allows changing the PIN of a card. > > I am not sure if this is an intentional limitation of the cards (to > prevent users from

Re: Changing PINs of German bank card

2017-07-11 Thread Binarus
On 11.07.2017 10:14, NdK wrote: > Il 11/07/2017 09:44, Binarus ha scritto: > >> - If somebody tries to brute force the pin (or online banking password), >> the access will be permanently denied if there are more than 3 failures >> (the exact number may vary). That means that the length of the pin

Re: Changing PINs of German bank card

2017-07-11 Thread Julian H. Stacey
> > This is probably a general question -- > >=20 > > I have never seen a German bank that allows changing the PIN of a card. > > So I wonder if it is because using a fixed (non-changeable) 4-digit PIN > > mailed in clear text really safer than using a 4 to 6 digit variable leng= > th > > PIN that

Re: Changing PINs of German bank card

2017-07-11 Thread NdK
Il 11/07/2017 09:44, Binarus ha scritto: > - If somebody tries to brute force the pin (or online banking password), > the access will be permanently denied if there are more than 3 failures > (the exact number may vary). That means that the length of the pin / > password is not as important as

Re: Changing PINs of German bank card

2017-07-11 Thread Binarus
On 10.07.2017 17:42, Guan Xin wrote: > This is probably a general question -- > > I have never seen a German bank that allows changing the PIN of a card. I am not sure if this is an intentional limitation of the cards (to prevent users from choosing idiotic pins like 1234 or their birthday). >

Re: Changing PINs of German bank card

2017-07-10 Thread Guan Xin
On Tue, Jul 11, 2017 at 1:52 AM, Matthias Apitz wrote: > > Nowadays some German banks allow changing the PIN in the Teller > Machines. I saw it today in an ATM of the Sparkasse. Amex allows (or > allowed) requesting a new personal PIN by fax. > > Interesting ... Just closed my

Re: Changing PINs of German bank card

2017-07-10 Thread Guan Xin
On Tue, Jul 11, 2017 at 1:38 AM, Ingo Klöcker wrote: > > ... and that would very often be either 1234[56] or the card owner's > date of birth as we all know. A random 4-digit PIN randomly chosen by > the bank is certainly safer than this. > > Yes, that's true. > German banks

Re: Changing PINs of German bank card

2017-07-10 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Monday 10 July 2017 at 8:24:28 PM, in , gnupg-users.d...@o.banes.ch wrote:- > In e.g. switerland it is normal to change your PIN - > which is most time > 6 Digits long. In the UK bank card

Re: Changing PINs of German bank card

2017-07-10 Thread gnupg-users . dirk
since german bankingcards / even girocard should comply to EMV Standard a change of PIN via Issuer Script should be possible - if the issuer - your bank - supports it. FYI: You have to change the PIN in the Card for offline validation and the PIN stored in the issuers backed. In e.g. switerland

Re: Changing PINs of German bank card

2017-07-10 Thread Matthias Apitz
El día lunes, julio 10, 2017 a las 11:42:12p. m. +0800, Guan Xin escribió: > This is probably a general question -- > > I have never seen a German bank that allows changing the PIN of a card. > So I wonder if it is because using a fixed (non-changeable) 4-digit PIN > mailed in clear text really

Re: Changing PINs of German bank card

2017-07-10 Thread Ingo Klöcker
On Monday 10 July 2017 23:42:12 Guan Xin wrote: > This is probably a general question -- > > I have never seen a German bank that allows changing the PIN of a > card. So I wonder if it is because using a fixed (non-changeable) > 4-digit PIN mailed in clear text really safer than using a 4 to 6 >