Text 29760, 86 rader
Skriven 2015-12-26 20:12:22 av mark lewis (1:3634/12.73)
  Kommentar till text 29726 av David Drummond (3:640/305)
Ärende: Rules of Echomail
=========================
27 Dec 15 07:48, you wrote to me:

 ml>> some systems are updating to the RFID chips but those are not really
 ml>> all that good, either... anyone with a RFID reader can walk by you
 ml>> and get the info...

 DD> More hear-say and urban myth?

here's just one example...

http://www.forbes.com/sites/andygreenberg/2012/01/30/hackers-demo-shows-how-easily-credit-cards-can-be-read-through-clothes-and-wallets/


here's a tinyurl for the same: http://tinyurl.com/7gpu7bc

i would expect that an IT guy like yourself would be up on security problems
and situations...

 DD> I have to purposefully pass my card within VERY CLOSE proximity to the
 DD> RFID reader to have it detected. When pushing the card into the chip
 DD> reader slot, or swiping the magnetic strip in the slot on the side the
 DD> RFID reader does NOT read the card.

then there's this...

https://www.rfidjournal.com/faq/show?139

[quote]
From how far away can a typical RFID tag be read?

The distance from which a tag can be read is called its read range. Read range
depends on a number of factors, including the frequency of the radio waves uses
for tag-reader communication, the size of the tag antenna, the power output of
the reader, and whether the tags have a battery to broadcast a signal or gather
energy from a reader and merely reflect a weak signal back to the reader.
Battery-powered tags typically have a read range of 300 feet (100 meters).
These are the kinds of tags used in toll collection systems. High-frequency
tags, which are often used in smart cards, have a read range of three feet or
less. UHF tags-the kind used on pallets and cases of goods in the supply
chain-have a read range of 20 to 30 feet under ideal conditions. If the tags
are attached to products with water or metal, the read range can be
significantly less. If the size of the UHF antenna is reduced, that will also
dramatically reduce the read range. Increasing the power output could increase
the range, but most governments restrict the output of readers so that they
don't interfere with other RF devices, such as cordless phones.
[/quote]

my recommendation is to be extremely careful with your RFID chipped cards...
they are /NOT/ as safe as you think they are...

 DD> Also, at in this country, the banks guarantee to refund any contested
 DD> "paywave" transaction.

that's the only thing protecting you... how much are they charging you for this
or the chip service? the charges are buried in your fees somewhere, somehow...
they're not doing this for free...

 ml>> i can see where PINs are needed in those cases... the funny thing is
 ml>> that these are like the echolist in that what is/was one of the
 ml>> things prevented by such, it opens the way for other theft
 ml>> capabilities which is just as bad or worse... consider someone not
 ml>> only reading your RFID chip without your knowledge but that they may
 ml>> also clone your phone and thus also get the PIN or even those
 ml>> one-time PINs that are used...

 DD> Is the credit/debit card PIN stored in the card - or just enough data
 DD> to identify the card for the ATM/EFTPOS network to interrogate the
 DD> bank's database for further details?

the CVV1 is stored in the mag strip on the card... the CVV2 number is on the
back of the card... PINs may or may not be on the mag strip... they have to be
compared to something somewhere for proof that they are correct... there's a
lot of stupid shit done in the hopes that simply being unknown or obsecure will
majikally make it "secure"...

)\/(ark

"So let me ask you a question about this brave new world of yours. When you've
killed all the bad guys, and when it's all perfect, and just and fair, and when
you have finally got it exactly the way you want it, what are you going to do
with the people like you? The trouble makers. How are you going to protect your
glorious revolution from the next one?" - The twelfth Doctor

... We have found the enemy and he is us.
---
 * Origin:  (1:3634/12.73)