Pages:
Author

Topic: On a panel with MasterCard and Visa (Read 5637 times)

member
Activity: 74
Merit: 14
September 23, 2013, 11:13:49 AM
#66
I think that is ultimately semantics.
The important point is that I am choosing the amount to be transferred, I am not relying on the merchant for that.

Where I think it gets beyond semantics is when you think of the IT implications.   The data that passes along the communication chain from retailer* to acquirer to switch to issuer is extremely sensitive and so has to be secured.  This has spawned industry standards such as PCI-DSS, which impose huge costs on all parties in the system and represents a very attractive target for bad guys, creating an escalating arms race.

A true "push" approach would not entail the passing of this sensitive data through this back channel from retailer (or acquirer, if you prefer) to issuer... it would rely on the customer initiating a payment *to* the merchant themselves... the attack surface is a lot smaller.  Now, I'm not saying this is perfect....  the question of how the merchant communicates their request to the customer is a difficult one.  The Bitcoin payment protocol work, which currently relies on X.509 certificates, etc., shows how hard this is to do on the internet.   For face-to-face transactions, you have to find a way for the merchant to share their "receipt address" to the customer in a way that can't be spoofed, etc.   The "bitcoin pub" in London does this by displaying a QR code on their POS device, that the customer can scan - but it's not particularly elegant.


(* in many cases, the retailer really does have sight of the card details... the card readers are integrated into POS systems and transactions are routed through branch systems...  it's not the case that all retailers never see the card details).
sr. member
Activity: 476
Merit: 250
September 23, 2013, 10:54:53 AM
#65
Chip and Pin doesn't work like that.
The card reader is supplied by the credit card company, and communicates directly to them, not through the retailer.
The retailer enters the amount to be charged, and hands the device to you. You see on the screen how much money will be sent, and choose to enter your Pin or not. You are pushing an amount of money you choose to the retailer, not trusting them to pull the right amount.

Not quite.

The card reader is provided by a merchant acquirer.

I accept the correction here.

Quote
In this model, it simply isn't possible for what you said to be true.  The communication is from the merchant, to the merchant acquirer, to the switch and then to the issuer.

But not here.
The device communicates to the 'merchant acquirer', the merchant is not part of the chain.

Quote
Sure, you may well authorise the request and provide a credential (your PIN) that allows the merchant to attest to the fact that you were present and authorised the request.  But it's still a *request*.  And you're trusting all the parties in that chain to present the request to the issuer such that what you authorised matches what is taken.

I'm not trusting the merchant (beyond trust that they have not supplied a hacked device), because their role ended when they entered the purchase amount into the device. I get to see that before entering my PIN to authorise the transaction, and I keep the device until the transaction has completed.

Quote
And I would argue that it's unambiguously a "pull" from the merchant, not a "push" from the purchaser.

I think that is ultimately semantics.
The important point is that I am choosing the amount to be transferred, I am not relying on the merchant for that.
sr. member
Activity: 364
Merit: 250
September 23, 2013, 10:46:55 AM
#64
Do they all look like dr. evils?
member
Activity: 74
Merit: 14
September 23, 2013, 10:41:54 AM
#63
Chip and Pin doesn't work like that.
The card reader is supplied by the credit card company, and communicates directly to them, not through the retailer.
The retailer enters the amount to be charged, and hands the device to you. You see on the screen how much money will be sent, and choose to enter your Pin or not. You are pushing an amount of money you choose to the retailer, not trusting them to pull the right amount.

Not quite.

The card reader is provided by a merchant acquirer.  This firm may well also have an issuing arm but they are not "the credit card company".  Think about it: does your local retailer have a different device for each of the thousands of different issuers of Visa or Mastercard cards in your country?  Clearly not.

The credit card system works on what's known as the four-party model (although there are really five parties):

* you, the purchaser
* your card issuer (usually a bank, which has usually issued you a card with both their logo and one of the card networks printed on it.  let's assume it's visa for now)
* visa (the switch)
* the merchant acquirer (the firm that "acquires" transactions from the merchant and routes them to the appropriate network)
* the merchant.

In this model, it simply isn't possible for what you said to be true.  The communication is from the merchant, to the merchant acquirer, to the switch and then to the issuer.

Sure, you may well authorise the request and provide a credential (your PIN) that allows the merchant to attest to the fact that you were present and authorised the request.  But it's still a *request*.  And you're trusting all the parties in that chain to present the request to the issuer such that what you authorised matches what is taken.

Now the system does actually work and the checks+balances mean that mistakes are found and customers do get refunds.  But it's a ridiculously complex system, and one that works the way it does (as Mike Hearn suggests a few posts back) because of the multi-decade history of the system and the technical constraints that existed when it was invented.

And I would argue that it's unambiguously a "pull" from the merchant, not a "push" from the purchaser.
legendary
Activity: 1204
Merit: 1002
Gresham's Lawyer
September 23, 2013, 10:21:40 AM
#62
It is an interesting point.  The Facebook marketing rollout started at Harvard.  Lots of people wanted to know people at Harvard, and initially it was exclusive.

The WWW started at CERN, some pretty smart people there, again university focused.

Bitcoin started with crypto programmers, and systems and security folks cross-bred with monetary philosophy.  Each of these starting groups are fairly elite, with high barriers of intelligence and depth of expertise needed to participate meaningfully.

Are we at the dilution phase, where it is no longer just the smartest?  If so, that suggests rapid growth ahead as we swing up the bell-curve into the "normals".
legendary
Activity: 1442
Merit: 1005
September 23, 2013, 09:59:52 AM
#61
Keep it positive, make Bitcoins community shine, a dedicated community of the smartest 1 percent of the population backing and supporting the cryptocurrency movement; with them all problems can be solved.

ROFL.
The smartest 1 percent?
This community here, at bitcointalk?
ROFL.
It's not funny, why do you laugh? Smiley
sr. member
Activity: 476
Merit: 250
September 23, 2013, 09:41:41 AM
#60
Keep it positive, make Bitcoins community shine, a dedicated community of the smartest 1 percent of the population backing and supporting the cryptocurrency movement; with them all problems can be solved.

ROFL.
The smartest 1 percent?
This community here, at bitcointalk?
ROFL.
sr. member
Activity: 476
Merit: 250
September 23, 2013, 09:37:33 AM
#59
The point I was trying to make was that the architecture of card processing has a fundamental weakness: the consumer authorises the merchant to generate and send a message to the consumer's card issuer (via the card network) to take funds from their account  However, ensuring that the amount you authorised matches the amount they request is decidedly non-trivial.  In the absence of controls, the amount they ask for could be anything.  This means that every time you use your card you are open to the risk that the merchant asks for far more than you were expecting.

To mitigate this risk, the edifice of card security grew up over time....  in the paper days, the fact that both the merchant and retailer had an identical copy of the voucher allowed the consumer to dispute a fraudulent transaction. More recently, technologies such as chip+pin try to do something similar.  But they're all really just sticking plasters on the funamental problem: card processing relies on the merchant "pulling" the funds from the consumer's card issuer.

Chip and Pin doesn't work like that.
The card reader is supplied by the credit card company, and communicates directly to them, not through the retailer.
The retailer enters the amount to be charged, and hands the device to you. You see on the screen how much money will be sent, and choose to enter your Pin or not. You are pushing an amount of money you choose to the retailer, not trusting them to pull the right amount.
legendary
Activity: 1526
Merit: 1134
September 23, 2013, 03:51:01 AM
#58
Well, to be fair to Visa they have an enormous legacy system that has to be managed. Someone has to do it.

The woman at the conference gave a pretty good talk actually, it was quite engaging (IMHO better than the one by the guy from Square). Someone in the audience asked about settlement times (a few days, currently, ignoring chargebacks) and she pointed out that when she started settlement times were routinely in the region of weeks or months in some parts of the world. Back then it was all paper based, and in some places (like Greek islands) someone had to actually travel around on a motorbike collecting the paperwork from the zipzap machines, take it to a clearing office, which then batched it up again and delivered it by hand to the next office in the chain, etc. So from their perspective going from months down to 3 days is a big improvement. Of course compared to 10 minutes it's still pretty poor.

But, again, let's be fair here. Although NFC card payments might seem kind of trivial to us pulling out your card, waiting for it to sync with the network, entering your PIN, waiting again, confirming the amount etc ... it slows things down a lot. Whenever you make something much faster and simpler, people do more of it. There's going to be real economic impact to a big rollout of NFC card payments just in terms of increased commerce, because the card networks are so huge. Especially for small purchases if people can buy something by pulling a card from their pocket, doing a 1 second tap  and then walking away, that can be a big deal.

It's always easier to do things when you start from scratch with a clean slate, and that's why Bitcoin is awesome. But VISA/MasterCard have been building their networks for decades. It's going to take a looooong time until Bitcoin handles even a fraction of the traffic they do.
legendary
Activity: 1442
Merit: 1005
September 22, 2013, 03:16:20 PM
#57
I recently was at a conf where a woman from Visa gave a talk on the "future of money". She was all about NFC payments as well.

I agree that it's a rather damning indictment of the existing payments industry that switching from a wired to wireless interface for the last few centimeters of a transaction is considered the the cutting edge of innovation. From their perspective though it's a big deal - it means changing all the point of sale equipment, it means somewhat more convenient payments for common transaction sizes, etc. They aren't even capable of imagining things that shake up the organisational status quo at this point.
Oh, how cute, you can use a technology in your field 10 years after it's launch...

Imagine explaining her that YOU can execute money transfers of over 1 000 000 USD, from within your mobile phone, to any other person on the planet, within the hour, and with possibly NO FEE.

Or that you can store that million dollars on a sticky note or even in your mind!

And not only that, but your value grows by 1000% each year* without you doing or risking anything!

(*deflation will slow down once adoption reaches final levels and the adoption S curve is formed)
legendary
Activity: 3598
Merit: 2386
Viva Ut Vivas
September 22, 2013, 01:00:52 PM
#56
So the credit card industry's innovation is mobile payments?

Kindly thank them for spending their advertising and marketing money to get people comfortable with something Bitcoin can already do. The more people get used to making mobile payments, the easier it will be to transition to Bitcoin.
legendary
Activity: 1204
Merit: 1002
Gresham's Lawyer
September 22, 2013, 10:42:24 AM
#55
Congratulations on opening some banker minds even without the benefit of a crowbar.
Very well done.  Thank you.
legendary
Activity: 1764
Merit: 1002
September 22, 2013, 10:22:35 AM
#54
The event started better than expected: The second speaker a partner from Deloitte demonstrated his knowledge of cutting edge technologies by asking the crowd (it was about 150 people) if they heard the name Satoshi Nakamoto. I was one out of 4 who raised a hand. At the end of his speech he had a slide exemplifying Bitcoin as real innovation to watch out for. I talked to him in the pause, but figured that he had only a rather shallow understanding of what Bitcoin is, but who cares, recognizing it as a disruptive innovation is the right first step.

The next talks were rather boring about online-banking innovations and security of banking applications. Innovations they were touting paled in comparison to Bitcoin, but they did not seem to know yet.

The final panel was the one I participated. It was preceded by a talk of the head of regulations department of the national bank (comparable to FinCen that operates within the national bank in Hungary). He spent quite a few minutes explaining why cash is bad for the economy and what benefits more frequent electronic payments would bring on national scale. I used this to catch him in the pause and telling him that cash and electronic payments is not a contradiction but Bitcoin is electronic cash. He got interested, so I have an invite to his office Smiley

My panel was with local MDs of Visa and MasterCard and a company launching a mobile wallet in cooperation with them that enables credit card payments via NFC. I managed to go over couple of arguments you shared with me. Let me draft the most notable exchanges:

They called NFC payment a breakthrough innovation, even a butterfly moment. I made the point that changing the infrastructure behind the payments is likely a bigger a breakthrough than the difference between sliding a plastic card into a slot vs. waving the mobile phone over the slot. The MasterCard guy said that the biggest obstacle in introducing a new payment method is gaining trust that they successfully established, I countered that people likely trust even more mathematics than them. They said in 5 years we will have majority using mobile payments with NFC, I said in 5 years we will no longer talk about innovation in payments but settlement of financial instruments and rights via technologies that learned from the Bitcoin network.

Close to the end the audience could vote (with a voting machine) on the question of what they see is future of payments is and a staggering 11% voted for Bitcoin (alternatives were credit card, mobile, bank transfer and cash payments)

I think that is as good as I could possibly get it, considering that only 2.6% new Satoshi's name at the begin of the conference.


Congratulations.

That is a good result as an absolute value and as a relative value from beginning to end.
legendary
Activity: 1526
Merit: 1134
September 22, 2013, 09:25:55 AM
#53
I recently was at a conf where a woman from Visa gave a talk on the "future of money". She was all about NFC payments as well.

I agree that it's a rather damning indictment of the existing payments industry that switching from a wired to wireless interface for the last few centimeters of a transaction is considered the the cutting edge of innovation. From their perspective though it's a big deal - it means changing all the point of sale equipment, it means somewhat more convenient payments for common transaction sizes, etc. They aren't even capable of imagining things that shake up the organisational status quo at this point.
legendary
Activity: 1193
Merit: 1003
9.9.2012: I predict that single digits... <- FAIL
September 19, 2013, 06:38:24 PM
#52
I am invited to join a panel discussion with local managing directors of MasterCard and Visa at a high profile Finance IT forum on 19. September.

Please feed me any arguments and facts with links you think would be helpful to make Bitcoin shine in comparison. Thanks in advance.

Please let us know how it went today.

https://bitcointalksearch.org/topic/m.3191188
legendary
Activity: 1806
Merit: 1090
Learning the troll avoidance button :)
September 19, 2013, 06:35:17 PM
#51
I am invited to join a panel discussion with local managing directors of MasterCard and Visa at a high profile Finance IT forum on 19. September.

Please feed me any arguments and facts with links you think would be helpful to make Bitcoin shine in comparison. Thanks in advance.

Please let us know how it went today.

Already did and biometrics is a hot field glad to hear some comments helped
legendary
Activity: 2492
Merit: 1473
LEALANA Bitcoin Grim Reaper
September 19, 2013, 05:55:55 PM
#50
I am invited to join a panel discussion with local managing directors of MasterCard and Visa at a high profile Finance IT forum on 19. September.

Please feed me any arguments and facts with links you think would be helpful to make Bitcoin shine in comparison. Thanks in advance.

Please let us know how it went today.
hero member
Activity: 756
Merit: 501
There is more to Bitcoin than bitcoins.
September 19, 2013, 02:54:42 PM
#49
Sounds good man!

Just out of curiosity, was their innovation talk built around NFC? Does it have anything extra above chip/pin methods, like any new types of security or communications behind it?

Yes, it seem to qualify as innovation that cards are loaded into a wallet app and charged via NFC (up to a limit of about 20$ without further interaction by the customer) They were pretty excited about soon combining it with biometric authentication (say iPhone).
From the consumer privacy perspective, their solutions seem designed for tracking. Even a static bitcoin address offers at least some uncertainty, which is completely removed by the biometric NFC wallet.
hero member
Activity: 836
Merit: 1030
bits of proof
September 19, 2013, 02:24:17 PM
#48
Sounds good man!

Just out of curiosity, was their innovation talk built around NFC? Does it have anything extra above chip/pin methods, like any new types of security or communications behind it?

Yes, it seem to qualify as innovation that cards are loaded into a wallet app and charged via NFC (up to a limit of about 20$ without further interaction by the customer) They were pretty excited about soon combining it with biometric authentication (say iPhone).
legendary
Activity: 1442
Merit: 1005
September 19, 2013, 01:57:20 PM
#47
The event started better than expected: The second speaker a partner from Deloitte demonstrated his knowledge of cutting edge technologies by asking the crowd (it was about 150 people) if they heard the name Satoshi Nakamoto. I was one out of 4 who raised a hand. At the end of his speech he had a slide exemplifying Bitcoin as real innovation to watch out for. I talked to him in the pause, but figured that he had only a rather shallow understanding of what Bitcoin is, but who cares, recognizing it as a disruptive innovation is the right first step.

The next talks were rather boring about online-banking innovations and security of banking applications. Innovations they were touting paled in comparison to Bitcoin, but they did not seem to know yet.

The final panel was the one I participated. It was preceded by a talk of the head of regulations department of the national bank (comparable to FinCen that operates within the national bank in Hungary). He spent quite a few minutes explaining why cash is bad for the economy and what benefits more frequent electronic payments would bring on national scale. I used this to catch him in the pause and telling him that cash and electronic payments is not a contradiction but Bitcoin is electronic cash. He got interested, so I have an invite to his office Smiley

My panel was with local MDs of Visa and MasterCard and a company launching a mobile wallet in cooperation with them that enables credit card payments via NFC. I managed to go over couple of arguments you shared with me. Let me draft the most notable exchanges:

They called NFC payment a breakthrough innovation, even a butterfly moment. I made the point that changing the infrastructure behind the payments is likely a bigger a breakthrough than the difference between sliding a plastic card into a slot vs. waving the mobile phone over the slot. The MasterCard guy said that the biggest obstacle in introducing a new payment method is gaining trust that they successfully established, I countered that people likely trust even more mathematics than them. They said in 5 years we will have majority using mobile payments with NFC, I said in 5 years we will no longer talk about innovation in payments but settlement of financial instruments and rights via technologies that learned from the Bitcoin network.

Close to the end the audience could vote (with a voting machine) on the question of what they see is future of payments is and a staggering 11% voted for Bitcoin (alternatives were credit card, mobile, bank transfer and cash payments)

I think that is as good as I could possibly get it, considering that only 2.6% new Satoshi's name at the begin of the conference.

Sounds good man!

Just out of curiosity, was their innovation talk built around NFC? Does it have anything extra above chip/pin methods, like any new types of security or communications behind it?
Pages:
Jump to: