Sunday, May 3, 2015
YOLO COUNTY NEWS
99 CENTS

Joe Nocera: Dogged by data theft

JoeNoceraW

By
From page A6 | February 12, 2014 |

“What is stopping us from moving to this kind of technology?” asked a perplexed Sen. Amy Klobuchar, D-Minn. It was last Tuesday, and the Senate Judiciary Committee, on which Klobuchar sits, was holding a hearing about the recent breaches of Target and Neiman Marcus in which the data from tens of millions of credit and debit cards were stolen.

The technology Klobuchar had in mind is known as chip-and-PIN. The chip refers to a computer chip embedded in a credit or debit card that encrypts data and authenticates the card. The PIN refers to a personal identification number the customer has to use, which, in effect, authenticates the user.

It is no big secret that, from a security standpoint, a chip-and-PIN system is far superior to the magnetic stripe that is the backbone of the credit and debit card systems in the U.S. Criminal gangs in Eastern Europe have learned how to penetrate many computer systems of U.S. retailers and “skim” credit card data at the moment a transaction takes place. That kind of theft would be virtually impossible with a chip-and-PIN system.

Nor is it news that much of the rest of the world long ago adopted chip-and-PIN technology; according to MasterCard, 79 percent of terminals in Canada, Latin America and the Caribbean are “chip-enabled,” a figure that rises to 95 percent in parts of Europe. But, inexplicably, this clearly superior technology has not yet penetrated the United States.

Or maybe it’s not so inexplicable. The main stumbling block, it would appear, is that retailers and bankers have spent way too much time blaming each other for the growing data theft problem — and not nearly enough time worrying about the people whose data have been stolen. Namely, us.

“Why did the U.S. stick with the mag stripe?” said David Robertson, publisher of The Nilson Report. It may not have been best for consumers, but it was “cheap and efficient” for the banks and retailers. What’s more, banks and retailers had a certain amount of fraud built into their business models. Thus, while a hacked card brought big headaches to the customer, it was just another cost of doing business for the other entities involved in the transaction.

Even as Europe and Canada were moving to a chip-and-PIN system, the U.S. banks held back. Fraud at the point of sale dropped dramatically in countries with chip-and-PIN. Still the U.S. held back. Every time there was a push to adopt chip-and-PIN, both retailers and bankers would do the math and come to the same conclusion: It wasn’t worth the trouble.

And when a company did try to adopt it? That’s what Target tried to do around 2003 — only to discover that it was largely a waste of money if nobody else went along. In Europe and elsewhere governments had pushed companies to adopt chip-and-PIN. In the United States, the banks and retailers needed to be able to work together — spending billions both to manufacture new cards and install new terminals that could read the cards.

There are two things that are likely to change the equation. The first is the Target breach, which, one expert told me, could involve as many as one in every 10 cards in circulation in the U.S. Many of the cards are debit cards, which means if the card is used by a crook to make a purchase, it comes directly out of the customer’s bank account. (Target has vowed to indemnify any customer who has losses as a result of the breach.)

The Target breach has shown the reputational hit a company can take when its system is breached. It also has had business consequences: the last two weeks of the Christmas season were lousy ones for Target — and the publicity from the breach is considered a prime culprit.

Second, though, Visa and MasterCard have both set forth timetables that attempt to institute the adoption of embedded-chips technology by the fall of 2015. Although the timetables are not mandatory, they would essentially shift the liability for card losses on to whichever side — the bank or the retailer — has the least secure technology. Although there were various calls for delaying the implementation yet again, those calls stopped once the Target breach took place.

Which is not to say that the banks and the retailers are now seeing eye to eye. When I spoke to a bank lobbyist last week, he told me that the real problem was “a weakness in the internal computer system of large companies that sophisticated criminals have learned to exploit.” The retailers, meanwhile, retort that the banks have continually come up with ideas short of chip-and-PIN, none of which ever worked for long before the bad guys figured how to breach them.

The only thing missing from these arguments is the consumer.

— The New York Times

Comments

comments

.

News

Breaking barriers: For Prieto, it’s all about hard work

By Lauren Keene | From Page: A1 | Gallery

 
Council to hear about drought pricing

By Dave Ryan | From Page: A1

Peaceful Baltimore demonstrators praise top prosecutor

By The Associated Press | From Page: A2

 
Nigeria: Nearly 300 freed women, children led to safety

By The Associated Press | From Page: A2

 
For the record

By Enterprise staff | From Page: A2

 
Graveyard thefts land three Woodlanders behind bars

By Lauren Keene | From Page: A3

Downtown altercation leads to injuries

By Anne Ternus-Bellamy | From Page: A3

 
Woman arrested for brandishing knife on overpass

By Anne Ternus-Bellamy | From Page: A3

Yolo DA launches monthly newsletter

By Enterprise staff | From Page: A3

 
Can plants talk? UCD prof will answer that question

By Special to The Enterprise | From Page: A3 | Gallery

A Scottish setting for local author’s next book

By Special to The Enterprise | From Page: A3

 
Free beginner yoga class offered

By Enterprise staff | From Page: A4

 
Video discusses surveillance of prostate cancer

By Special to The Enterprise | From Page: A4

NAMI support group meets May 10

By Enterprise staff | From Page: A4

 
Dr. G featured on the radio

By Special to The Enterprise | From Page: A4

Fee proposed on rail cars that haul oil, other flammables

By The Associated Press | From Page: A4 | Gallery

 
Indoor Fun Fly comes to Woodland

By Enterprise staff | From Page: A4

 
Internships move UCD doctoral students beyond academia

By Julia Ann Easley | From Page: A5 | Gallery

Make Mom a warm vanilla sugar scrub

By Enterprise staff | From Page: A6

 
The secret to Mother’s Day gifting success: Give time, not stuff

By Special to The Enterprise | From Page: A6

Letter book is series of collected missives thanking Mom

By The Associated Press | From Page: A7

 
If your mom fancies something fancy, consider a tea party

By The Associated Press | From Page: A7

Out of Africa and back to Davis: James Carey will give special presentation

By Kathy Keatley Garvey | From Page: A9 | Gallery

 
Big Day of Giving makes philanthropy easy

By Tanya Perez | From Page: A10 | Gallery

Tuleyome Tales: How are a snake and a mushroom alike?

By Special to The Enterprise | From Page: A12 | Gallery

 
Tuleyome hosts Snow Mountain camping trip

By Special to The Enterprise | From Page: A12 | Gallery

.

Forum

End of life doesn’t mean life must end

By Special to The Enterprise | From Page: B4 | Gallery

 
Advancing education for California’s former foster youths

By Special to The Enterprise | From Page: B4

With sincere gratitude

By Letters to the Editor | From Page: B4

 
A wonderful day of service

By Letters to the Editor | From Page: B4

Please help Baltimore

By Letters to the Editor | From Page: B4

 
Eyewitness to the ‘fall’ of Vietnam: It was not a bloodbath

By Special to The Enterprise | From Page: B5 | Gallery

He can’t give it up

By Creators Syndicate | From Page: B6

 
 
Dangers from prescription pills

By Special to The Enterprise | From Page: B6

.

Sports

UCD softball splits with Titans

By Enterprise staff | From Page: B1 | Gallery

 
Trifecta of Devil teams open playoffs Tuesday

By Evan Ream | From Page: B1 | Gallery

 
Defending champ DHS clinches a baseball playoff berth

By Enterprise staff | From Page: B1

Making memories at Aggie Stadium

By Wayne Tilcock | From Page: B3 | Gallery

 
Sports briefs: DHS boys win to reach lacrosse playoffs

By Enterprise staff | From Page: B3 | Gallery

UCD roundup: Aggie women speed past Hornets

By Enterprise staff | From Page: B12 | Gallery

 
Pro baseball roundup: Hudson pitches Giants past Angels

By The Associated Press | From Page: B12

.

Features

.

Arts

.

Business

Arcadia partners on soybean trait to improve yield

By Special to The Enterprise | From Page: A8

 
Marrone opens new greenhouse

By Special to The Enterprise | From Page: A8

 
New firm helps students on path to college

By Wendy Weitzel | From Page: A8

Yolo County real estate sales

By Zoe Juanitas | From Page: A8

 
.

Obituaries

.

Comics

Comics: Sunday, May 3, 2015

By Creator | From Page: B8