jm + rfid   5

Contactless credit cards vulnerable to a range of scams
Johanson said it's possible to use an RFID "gate antenna" — two electronic readers spanning a doorway, similar to the anti-theft gates in retail stores — to scan the credit cards of people passing through. 
With enough high-powered gates installed at key doorways in a city or across the country, someone could collect comprehensive information on people's movements, buying habits and social patterns.
"These days you can buy a $500 antenna to mount in doorways that can read every card that goes through it," Johanson said.


Amazingly, these seem to be rife with holes -- they still use the legacy EMV protocol, do not require online verification with backend systems, and allow replay attacks. A Journal.ie article today claims that attackers are sniffing EMV data, then replaying it against card readers in shops in Dublin, which while it may not be true, the attack certainly seems viable...
rfid  security  scams  emv  wireless  contactless  credit-cards  replay-attacks 
december 2016 by jm
PayWave & PayPass deletion via RFID antenna kill
remove RFID from a payment card with a single drilled hole
rfid  banking  cards  debit-cards  credit-cards 
november 2016 by jm
Transform your oyster travelcard with sugru!
probably totally dodgy where the Oyster rules are concerned, but still pretty damn cool
sugru  hacks  oyster  instructables  rfid  via:itc 
january 2016 by jm
FareBot: Read data from public transit cards with your NFC-equipped Android phone - codebutler
'When demonstrating FareBot, many people are surprised to learn that much of the data on their ORCA card is not encrypted or protected. This fact is published by ORCA, but is not commonly known and may be of concern to some people who would rather not broadcast where they’ve been to anyone who can brush against the outside of their wallet. Transit agencies across the board should do a better job explaining to riders how the cards work and what the privacy implications are.' (via Boing Boing)
via:boingboing  privacy  android  rfid  security  transit  mobile  encryption  mifare  desfire  farebot  from delicious
february 2011 by jm
RFID "zapper" constructed from disposable camera
also, an RFID "jammer" to block reads of RFID chips within range. related: the Israeli govt is considering voting cards with RFID chips, apparently
rfid  via:risks  security  hardware  rf  radio  jamming  israel  from delicious
april 2010 by jm

Copy this bookmark:



description:


tags: