Monday, October 23, 2006

RFID enabled credit cards storing your info in clear text?

CC company to customer: Those were lab draft editions of our new cards.

Private research to CC company: We ordered cards for ourselves as if we were normal customers for this test.

See the article:
http://news.com.com/Researchers+see+privacy+pitfalls+in+no-swipe+credit+cards/2100-1029_3-6128407.html

Excerpt:

" . . . in tests on 20 cards from Visa, MasterCard and American Express, the researchers here found that the cardholder's name and other data was being transmitted without encryption and in plain text. They could skim and store the information from a card with a device the size of a couple of paperback books, which they cobbled together from readily available computer and radio components for $150.

They say they could probably make another one even smaller and cheaper: about the size of a pack of gum for less than $50.

And because the cards can be read even through a wallet or an item of clothing, the security of the information, the researchers say, is startlingly weak. "Would you be comfortable wearing your name, your credit card number and your card expiration date on your T-shirt?" Heydt-Benjamin, a graduate student, asked."

No comments:

Post a Comment

Comments are welcome but moderated to prevent spam links. I usually check them at least once a day in the evenings - so please be patient with me if your comment does not appear quickly.

Thank you.