June 17, 2013

Bitcoin income shall be taxed, Dijsselbloem says

Filed under: Dutch first,Technology by Branko Collin @ 12:19 pm

Dutch people who accept payments in the new Internet currency Bitcoin will have to pay income tax on the funds they receive. Finance Minister Jeroen Dijsselbloem confirmed this two weeks ago after parliament had asked questions about Bitcoin, Nu.nl reports.

According to the minister, the “alternative virtual currency” cannot be seen as “electronic money” because it fails the definition set by the Dutch law. Dijsselbloem also reported that approximately 2% of all Bitcoin users in the world are Dutch, and that these Dutch owners possess about 20 million euro worth of Bitcoin. At the time of writing 1 Bitcoin represents about 75 euro.

Internet lawyer Arnoud Engelfriet helpfully explains that the Wet financieel toezicht (the law on financial control) defines electronic money as a monetary value that

  • Is stored electronically.
  • Represents a claim on the person or organisation who issues it.
  • Is issued in exchange for money to make payments with.
  • Can be used to pay both the issuer and others.

Since Bitcoins do not represent a claim on the issuer and they aren’t necessarily issued in exchange for money, they aren’t electronic money. The reason you still have to pay income tax is simply because the law on income tax doesn’t mention money. Any form of income, whether that income consists of money, goods or Bitcoins, is susceptible to being taxed. The problems start when you have to pay these taxes though, because the Dutch tax office only accepts money. Your revenue will somehow have to be valued in euro before you can calculate how much you have to pay.

I can well imagine that the belastingdienst (tax office) isn’t going to chase down small time Bitcoin users just yet. I remember the first time I became self-employed and asked the belastingdienst for a VAT number. The man on the other end of the line laughed at me and said they could not be bothered to issue me my number for the couple of hundred guilders I expected to make that year.

Another complicating matter according to Engelfriet is that Bitcoins aren’t financial products either. That would mean you will have to pay VAT (‘btw’) over the Bitcoins you receive, which would make trading in Bitcoins less attractive for the Dutch.

Tags: , , , ,

August 25, 2012

The least safe PIN is 2580

Filed under: Technology by Branko Collin @ 1:04 pm

Two students of the Eindhoven University of Technology have discovered that the least safe code for your bank card (PIN) is 2580.

They did this by estimating which hand movements are easiest to observe, then calculating the amount of fits for each series of movements. The PIN 2580 on a grid that consists of the rows 123, 456, 789 and x0x requires a continuous downward motion of the hand, and is the only code possible for that series of movements. A bad actor should be able to guess that PIN 100% of the time.

Eindhoven Dichtbij reports that 292 codes can be guessed in three goes after observing hand movements. This also produces a 100% success rate, assuming the bad actors get three attempts before access is blocked. Codes that are relatively safe require lots of back and forth movements. The code 1959 belongs to the same set of hand movements as 105 other PINs.

I wonder if making fake movements would help against PIN thieves?

The students, Anne Eggels and Aukje Boef, also considered other ways of hacking PINs:

  • Dabbing the keys in salts, and measuring which salts were gone after use of the keypad—especially useful for PINs in which the same key is used more than once.*
  • Camera surveillance.
  • Observing wear and tear of keys—useful in locations where the same PIN is shared my most users, such as nursing home wards.

Aukje Boef has a telling name by the way, as her last name means ‘crook’ in Dutch.

Update: found an article from last year that claims 2580 is the third most used PIN.

*) This is an old trick that I was aware of. To this day paranoid me wipes all keys with his fingers after entering a code.

(Photo by Flickr user Redspotted, some rights reserved. Link: Bright.)

Tags: , , , , ,