Monthly Archives: January 2005

Freedom of Information, Request #1

Tis that time of year when my car tax disc is up for renewal, and it being so close after christmas means it is a hefty whack (�165) to find.

So, I’m thinking, I can pay my TV license, Council Rates and most other things via monthly Direct Debit, so why not my tax disc?

So I plan on finding out


I’ve sent a request to the DVLA under the new FOI rules to find out.
———————————————————————
To: foi.dvla@gtnet.gov.uk
Subject: Request documents pertaining to deliberations on VED payment methods

I write to request documentations from the dept on discussions, meetings, etc
specifically on the methods of payment available to the public when paying
for Vehicle Excise Duty (VED, Road fund License, Car Tax).

Specifically, any reference to monthly payment options discussed, rejected
or otherwise planned for the future along with any expected introduction dates.

Thank you for your attention in this regard,

Paul Gregg
———————————————————————

I’ll let you know what I find out.

Chip and Pin – Excuse me?

If you like in the UK or Northern Ireland, you’re probably finding that, instead of writing your signature, you are being asked to enter your PIN on a little keypad when you use your debit or credit card to make purchases.



Now, please forgive me if I’m way off the mark, but how is this supposed to increase security?  Seems to me that we have simply replaced one flawed system for another.





Flawed?  How so?  Well, in "the old days" scammers used to run your card through a magnetic strip reader and they could create "cloned" copies of your card.  The data would be written onto a fresh, blank card and they could sign the back whatever way they wanted.  The criminal would then go use your card in a store to pay for goods and the signature would be good. And you are out of pocket.



Now, they are asking you to enter your pin.   Excellent – now they also have your PIN number – how they get it via electronic interception between the keypad and the device,  over the wire, or by "shoulder surfing" – doesn’t matter.  Joe Crim now has your pin.  They also have a swipe of your card (all the shops I’ve used my card in so far with "chip & pin" have both swiped it and put it into the pin keypad).   So, not only can they burn the magstripe onto a fresh card and use it, they can pop it into an ATM and withdraw cash directly from the account with my PIN.



Lovely, who comes up with these ideas?