Barclays PINSentry

The new muggers best friend?

[ytswy]

Barclays in the UK requires you to use a "PINSentry" card reader to access your online banking - it's a little device that you slot your debit card into and it gives out a unique code you use to authorise transactions.

What seems completely braindead about the system is that you can use it to validate the pin number of any chip and pin enabled barclays debit card - I tried it with the Electron card for my bank personal bank account (which doesn't have online banking set up) and it was able to check whether I'd entered my pin number correctly.

I can't get over how stupid this is - previously if a mugger wanted to get the correct pin number off you, he'd have to get you over to a cash machine, or hold you hostage while he tried to use it or something. Now he can verify it there and then while you still have a knife to your throat..

Am I missing something here? It just seems a really bad idea to mass produce and distribute portable pin validation devices...

[ArdRi]

I wonder if Barclays will respond to your query? You make a good point here.

[topr8]

chip readers are readily available anyway.

i'm not sure but doesn't pin sentry allow only 3 incorrect pin entries?

if a mugger was to have one in his pocket he would possibly be able to be prosecuted for "going equipped" eg. just like carrying around a pair of bolt cutters for no good reason, carrying a pin card reader for no good reason could be a reason to be arrested (i'm not a lawyer or policeman so i could be wrong on that)

finally, muggers are not usually that sophisticated as far as criminals go, it is a crime of desperation where the consiquences of getting caught far outweight the return. [with apologies to anyone who has been mugged]

[ytswy]

Maybe you're right. I just have visions of these things being everywhere by the end of the year (Barclays must be supplying them by the million). While I agree with you on the average competency of petty criminals, if it became common knowledge that you can do this I could see it being a problem.

Even if it isn't a major problem in terms of it happening much, it does seem a PR issue waiting to happen.