Everyone owns a card from the bank. Every card has 4 digit pin.
If someone steals / finds my card I know that this 10.000 combinations are silly stuff to crack. I presume with some piece of hardware (card reader) and brute force it's too easy.
Does the bank card have any other security other than 4 digit pin and how does it work?
The chip on the card functions as a tiny computer communicating with the card reader. It never reveals the PIN to the reader, but instead use a crypto protocol. This means that the card itself can enforce rate limiting to prevent brute force - i.e. locking after X failed attempts. Not sure this is done everywhere, but I know it is in some countries/by some banks.
However, if you are in physical possession of a credit card, you already have enough information to perform purchases on the internet. All you need to know to max out the card on a bitcoin shopping spree is written on the card. So brute forcing the PIN is not nececarry to perform fraud.
The four digit PIN isn't the only vulnerable component. The implementation has many issues too.
The Security Group at the University of Cambridge Computer Laboratory maintains a blog and they have explored many vulnerabilities in chip and pin system. Here is an article that they have written on chip and pin: https://www.lightbluetouchpaper.org/2009/04/09/chip-and-pin-on-trial/
And Register has another one about threats to researcher trying to highlight these issue: http://www.theregister.co.uk/2010/07/06/atm_security_talk_pulled/
No, this is why it's important to shield your PIN and never use the same PIN on multiple cards, however the PIN itself is encrypted on the card so it cannot be read directly easily.
